Senior Azure Platform Engineer: Secure Kubernetes & CI/CD

NCS Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NCS seeks a Senior DevOps Engineer to own the Azure platform and Kubernetes workloads, ensuring secure, reliable delivery. You will automate everything-as-code and partner with product teams to enable fast, secure deployments.

Responsibilities include building Azure Landing Zones, private AKS clusters, SBOM and image scanning, GitOps with Argo CD/Flux, and strong observability and incident response across the cloud stack.

Qualifications

• 7+ years in DevOps/SRE/Platform Engineering with Azure experience.
• 3+ years delivering Azure Landing Zones or equivalent foundations.
• Strong in GitHub Actions/Azure DevOps and reusable workflows.
• Hands-on with container security policies and image signing.
• Network security in Kubernetes with default-deny and TLS.
• Experience with observability, SLOs, and incident response.
• Infra as code and GitOps tooling at scale.

Responsibilities

• Own security, reliability, and delivery of Azure platform and Kubernetes workloads.
• Automate infrastructure and deployments with a GitOps approach.
• Design and operate private AKS clusters with policy enforcement.
• Implement SBOM, image scanning, and provenance verification.
• Lead incident response, postmortems, and continuous improvements.

Skills

Infrastructure as code

CI/CD automation

Security by design

Cloud platforms

Collaboration with product teams

Incident response

Kubernetes in production

Tools

Azure

Kubernetes

GitHub Actions

Azure DevOps

Terraform

Bicep

cosign

OPA/Gatekeeper

Kyverno

Nessus

Job description

NCS seeks a Senior DevOps Engineer to own the Azure platform and Kubernetes workloads, ensuring secure, reliable delivery. You will automate everything-as-code and partner with product teams to enable fast, secure deployments.

Responsibilities include building Azure Landing Zones, private AKS clusters, SBOM and image scanning, GitOps with Argo CD/Flux, and strong observability and incident response across the cloud stack.