#Hiring- Devsecops Engineer

ITCAN PTE. LIMITED; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

ITCAN PTE. LIMITED is seeking an experienced DevOps Engineer to support the DataSphere platform, a data lakehouse solution built on AWS GCC. The role focuses on implementing robust CI/CD pipelines, security compliance, and governance within a government environment.

You will work with Data Engineers, Compliance teams, and security specialists to ensure secure, efficient operations across datamarts and data pipelines.

Qualifications

• Minimum 3 years of DevOps engineering experience.
• Experience in government GCC environments is required.
• Understanding of security best practices and compliance.

Responsibilities

• Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem.
• Configure GitLab for version control and automated deployment workflows.
• Implement code quality gates using SonarQube for static code analysis.
• Manage security scanning with Fortify on Demand and Nexus IQ.
• Coordinate with CloudSCAPE for security compliance scanning and remediation.
• Monitor platform operations and support multiple datamarts.

Skills

AWS GCC environment

Terraform

GitLab CI/CD

SonarQube

Fortify on Demand

Nexus IQ

Security compliance knowledge

Containerization & orchestration

Python / Bash / PowerShell

Education

AWSCertified DevOps Engineer

Tools

Terraform

GitLab CI

Nexus IQ

Fortify on Demand

SonarQube

Job description

Job Description & Requirements

Job Description

Position Overview

We areseeking an experienced DevOps Engineer to support the DataSphere platform, acomprehensive data lakehouse solution built on AWS Government Commercial Cloud(GCC) environment. The successful candidate will be responsible forimplementing robust CI/CD pipelines using government-approved tools, andensuring compliance with stringent security and governance requirements.

Key Responsibilities:

CI/CDPipeline Management:

• Developand maintain CI/CD pipelines using SHIP-HATS tools ecosystem
• ConfigureGitLab for version control and automated deployment workflows
• Implementcode quality gates using SonarQube for static code analysis
• Managesecurity scanning using Fortify on Demand (FOD) for vulnerability assessment
• Overseedependency scanning and management using Nexus IQ
• Coordinatewith CloudSCAPE for security compliance scanning and remediation

Security and Compliance:

• Implement and maintain Automated Baseline Log Review (ABLR)systems
• Coordinate with GovTech Cyber Security Operations Centre(GCSOC) for security monitoring
• Manage Central Accounts Management (CAM) integration foruser access control
• Coordinate and resolve Vulnerability Assessment andPenetration Testing (VAPT) findings.
• Ensure compliance with Personal Data Protection ImpactAssessment (PDPIA) requirements
• Implement and maintain Vulnerability Management System (VMS)

Platform Operations:

• Monitor system performance and implement optimizationstrategies
• Manage secrets and encryption key rotation for dataprotection
• Configure email notifications for data processing status anderror alerts
• Implement and maintain data retention policies
• Support SaaS whitelisting processes and approvals
• Coordinate System Security Acceptance Testing (SSAT)activities

Collaboration and Support:

• Work closely with Data Engineers, Data Analysts and securitytechnical team.
• Support multiple datamarts
• Provide technical guidance for Raw-to-Tech andTech-to-Business data pipelines
• Collaborate with various government divisions andstakeholders
• Support training environment setup for user onboarding andskill development

Required Qualifications

Technical Skills:

• Strong expertise in AWS services, particularly in GCCenvironment
• Proficiency in Infrastructure-as-Code tools, preferablyTerraform
• Experience with GitLab CI/CD pipeline development andmanagement
• Knowledge of security scanning tools (SonarQube, Fortify,Nexus IQ)
• Understanding of government security frameworks andcompliance requirements
• Experience with containerization and orchestrationtechnologies
• Strong scripting skills in Python, Bash, or PowerShell

Security and Compliance:

• Experience with government security clearance processes
• Knowledge of data classification and handling procedures(Sensitive High)
• Understanding of encryption mechanisms and key management
• Familiarity with vulnerability management and remediationprocesses
• Experience with security monitoring and incident responseprocedures

Certifications (Preferred):

• AWSCertified DevOps Engineer

Required Experience

• Minimum3 years of DevOps engineering experience
• Experience working in government environments, esp in GCC.
• Experience in agile development methodologies

Personal Attributes

• Good communication and collaboration abilities
• Attention to detail and commitment to security bestpractices
• Strong documentation and knowledge sharing practices
• Proactive approach to system monitoring and maintenance