Junior DevSecOps Engineer

THALES SOLUTIONS ASIA PTE. LTD.; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Thales Solutions Asia PTE. LTD. seeks a senior platform engineer to build and operate a cloud-first platform. You will develop scalable infrastructure as code with Terraform/Open Tofu and run a production-grade Kubernetes platform with strong security and governance.

You will drive DevOps excellence, establish golden paths for build/test/release, enable self-service for developers, and lead reliability initiatives across the stack.

Qualifications

• Proven track record building platform or DevOps end-to-end.
• Hands-on Kubernetes production experience with RBAC and admissions.
• Strong infra-as-code practice with Terraform or Open Tofu and GitOps.
• Experience with CI/CD pipelines and release strategies.
• Solid cloud-native security, least privilege, and supply-chain integrity.
• Operational maturity: defining SLOs, incidents, upgrades in prod.
• Proficiency in Go, Python, or Bash and Linux comfort.

Responsibilities

• Cloud infrastructure as code: build cloud foundations in Terraform and Open Tofu; design configurable Azure infra.
• Platform engineering on Kubernetes: run platform and capabilities with observability and governance.
• DevOps and golden paths: create secure, efficient build/test/release pipelines and runbooks.
• Developer self-service: provide interfaces for identity, access, repos, namespaces, and clusters.
• Operate and keep it reliable: define SLIs/SLOs, manage incidents, upgrades with minimal disruption.

Skills

Platform engineering

Kubernetes

Infrastructure as code

GitOps

CI/CD pipelines

Cloud-native security

Go/Python/Bash

Linux

End-to-end thinking

Education

Bachelor's degree in Computer Science

Master's degree in IT

Tools

Terraform

Open Tofu

Flux CD

Argo CD

GitLab

Sigstore/cosign

Trivy

Job description

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

Responsibilities

• Cloud infrastructure as code: Build the cloud foundation in Terraform and Open Tofu, to a high standard. You design Azure infrastructure to be configurable, so the platform can provision clusters of different profiles, such as front-facing, data-oriented, and developer-oriented, from the same well-factored code. You treat infrastructure as code as software: small, composable modules that assemble into a coherent foundation, with the versioning, review, and testing that keep them reliable and reusable. The desired state lives in Git, the platform reconciles it through Git Ops, and drift is detected rather than discovered.
• Platform engineering on Kubernetes: Build platform-as-a-service on that foundation and operate both the platform and the capabilities that run on it: observability, multi-tenancy, RBAC, governance, and FinOps. Alongside the security controls that keep it sound, including Pod Security Standards and Admission, a zero-trust posture with workload-to-workload mTLS, and supply-chain integrity through image signing. New initiative also includes enabling AI workloads, such as model serving and a governed AI gateway.
• DevOps and golden paths: Work across teams to build the golden paths developers follow paved routes for build, test, and release that are efficient and enforce code quality and security by default, so the secure path is also the easy one. You also build the services that support delivery, integrating testing, security scanning, SBOM generation, and observability into the pipeline, so pipeline health, runner configuration, and the state of the delivery system stay visible and well managed.
• Developer self-service: Build the interfaces that let developers' provision what they need, such as team identity and access, correctly configured repositories, namespaces, and cluster resources, without the platform team becoming a bottleneck. The goal is a platform that scales through self-service rather than manual requests, with every capability maturing toward being self-served or provided by default. You document these paths as you build them, so runbooks and golden-path guides are part of the deliverable.
• Operate and keep it reliable: Own the platform at runtime, not just at provisioning. You define and measure the SLIs and SLOs for the capabilities you ship, write the runbooks that make failure recoverable, and lead incident response when the platform degrades. You plan and run lifecycle work, such as cluster and component upgrades, with no data loss and minimal disruption to the teams on top, and when something breaks, you trace it to root cause and fix it accordingly.

REQUIREMENTS:

Education

• Bachelor's degree in computer science, Information Technology or related field.
• Master's degree in Computer Science or Information Technology if applicable

Essential Skills/Experience

• Several years building platform or DevOps capabilities end to end, from a developer problem to a production-grade, self-service solution (three to five years is a useful guide).
• Strong, hands-on Kubernetes experience in production, including RBAC, admission control, and diagnosing and resolving platform issues under pressure.
• Solid infrastructure-as-code practice (Terraform or Open Tofu) and a Git Ops approach to delivery (Flux CD or Argo CD).
• A working command of CI/CD pipelines and release strategy (GitLab pipelines, or equivalent).
• A sound grasp of cloud-native security: least privilege, network segmentation, secrets management, identity, and supply-chain integrity.
• Operational maturity: defining SLOs, responding to incidents, and running upgrades safely in production.
• Proficiency in at least one of Go, Python, or Bash, and comfort operating Linux.
• The conviction that infrastructure is code: version-controlled, reviewed, tested, and secured.

Desirable Skills/Experience

• Depth in Azure and its native services (AKS, AI Foundry, Network Manager, Key Vault, Entra ID, Application Gateway, Firewall, Private Endpoints).
• Experience building or operating an internal developer platform or developer portal.
• Familiarity with supply chain tooling (Sigstore/cosign, Trivy, Defect Dojo, or equivalent) and policy engines (Kyverno, OPA/Gatekeeper).
• Exposure to data-platform components such as a lakehouse, event streaming, or workflow orchestration.
• Exposure to safety-critical or regulated environments and the assurance discipline they require.

Essential / Desirable Traits

• You see systems end to end and resist thinking in silos.
• You translate technology into developer experience and hold several stakeholders' perspectives at once.
• You treat the platform as a product: you measure adoption and developer experience, and let that evidence, not assumption, guide what to build, harden, or retire next.
• You have learning agility, flexibility, and initiative.
• You are comfortable in an agile team and engaging directly with the developers you serve.
• You hold your convictions with humility, welcome constructive feedback, and stay resilient.

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.