Senior DevOps Engineer – Azure & Kubernetes Platform

Ncs; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

NCS is seeking a Senior DevOps Engineer to own the security, reliability, and delivery of our Azure platform and Kubernetes workloads. You will be the hands-on engineer for secure-by-default infrastructure—automating everything-as-code and partnering with product teams to enable fast shipping while maintaining security and resilience.

Responsibilities span Azure Landing Zones, AKS operations, CI/CD pipelines, identity and secrets management, observability, cloud security posture, networking, and

Qualifications

• 7+ years in DevOps/SRE/Platform Engineering
• Azure-specific experience with Landing Zones or foundations
• Hands-on with GitHub Actions/Azure DevOps and policy gates

Responsibilities

• Own Azure platform engineering, including Landing Zones, management groups, policies as code and guardrails
• Design and operate private AKS clusters, implement Pod Security Standards, network policies, workload identity, and secure ingress/egress
• Standardize CI/CD pipelines with GitHub Actions/Azure DevOps, enforce SBOM, image scanning, and immutable deployments (GitOps)
• Implement Entra ID RBAC & PIM, Managed Identities, Key Vault and secret rotation
• Establish Azure Monitor/Log Analytics baselines, tracing, SLOs, and actionable alerts; integrate with SIEM and run postmortems
• Drive Defender for Cloud coverage, vulnerability management and automated remediation
• Manage networking, privacy, encryption at rest/in transit and Private Link/Endpoints
• Codify DR runbooks, backups, multi-region patterns, and capacity planning
• Coach teams, uplift platform literacy, and provide templates and reference modules

Skills

DevOps practices

Kubernetes operations

Terraform

Security by design

GitHub Actions

Azure platform knowledge

SRE fundamentals

Tools

AKS

Terraform

Bicep

GitHub Actions

Argo CD

Flux

Job description

NCS is seeking a Senior DevOps Engineer to own the security, reliability, and delivery of our Azure platform and Kubernetes workloads. You will be the hands-on engineer for secure-by-default infrastructure—automating everything-as-code and partnering with product teams to enable fast shipping while maintaining security and resilience.

Responsibilities span Azure Landing Zones, AKS operations, CI/CD pipelines, identity and secrets management, observability, cloud security posture, networking, and