Senior DevOps Engineer/Developer - Dynamic Application Security Testing (DAST) (Banking Technol[...]

D L RESOURCES PTE LTD; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A technology services company in Singapore is seeking a hands-on DevOps Engineer responsible for migrating applications to a Dynamic Application Security Testing (DAST) platform. The ideal candidate will support a full stack of DevOps tools and should have expertise in automation, troubleshooting, and ensuring high system availability. Strong knowledge of DAST methodology and tools like HCL AppScan is required. This role demands a technical leader with excellent communication skills.

Qualifications

• Deep hands-on knowledge in DAST methodology and tools like HCL AppScan.
• Experience in supporting and maintaining full stack DevOps toolsets.
• Strong debugging and issue troubleshooting skills for DevOps platforms.

Responsibilities

• Migrate client bank's applications into Dynamic Application Security Testing (DAST) platform.
• Maintain all DevOps Enterprise toolsets, OS patching, and version upgrades.
• Support DevOps applications and ensure 100% uptime.

Skills

Dynamic Application Security Testing (DAST)

DevOps tool chain support

Automation scripting

Jenkins

Unix/Linux shell scripting

Tools

Jira

Confluence

Bitbucket

SonarQube

Artifactory

xRay

Job description

Responsibilities (Banking Sector Client)

• You will be responsible to migrate and onboard client bank's applications into Dynamic Application Security Testing (DAST) platform.
• Onboarding process and technicalities require candidates to be technical person.
• This role will include tasks to deliver and ensure DevOps systems reliability, availability and getting systems back to steady state as quickly as possible.
• You design and implement automation initiatives, perform script development and use DevOps tools to the advantage. In this portfolio of DevOps platform, you would also be responsible to maintain all DevOps Enterprise toolsets, OS patching, tools version upgrades, certificate-renewals. You would adopt enterprise monitoring culture, implementing SRE principles to identify and remediate issues before SLA, SLI, SLOs are violated.
• The successful candidate will be a technically savvy, dynamic leader, excellent communicator, have demonstrable technical hand-on supporting DevOps toolset coupled with excellent infrastructure knowledge and automation expertise.
• As part of a cross-functional product development group, you should be comfortable with working as part of highly talented teams ensuring that modern technology and process are utilised as part of the role.

Requirements

• We’re looking for a hands-on engineer who will be:
• MUST have deep hands-on knowledge and experience in Dynamic Application Security Testing (DAST) methodology and related tools like App Scan
• MUST have deep hands-on knowledge and experience in DevOps tool chain support and operability
• Ensures all DevOps tools 100% uptime, ensuring high levels of application reliability and resiliency
• Supporting and maintaining full stack DevOps toolsets. (Jira, Confluence, Bitbucket, Jenkins, SonarQube, Artifactory, xRay)
• Troubleshoot, deep dive RCA and fix DevOps platform issues related to DevOps platforms
• Establish enterprise monitoring capabilities for DevOps toolsets
• Has deep technical knowledge on debug, troubleshooting Jenkins groovy scripts, pipelines thru Jenkins, Bitbucket, SonarQube, etc
• Able to code, script, automate full DevOps automation capabilities to enhance and elevate automation from manual human tasks.
• Always able to find ways to automate, develop scripts, innovate new ideas to reduce human work and repetitive tasks.
• Support OS and DevOps applications patching related activities.
• Remediate DevOps infrastructure issues such as Control-M jobs, backup jobs, BMC Alerts, schedulers, cron-batch, shell scripting commands, etc.
• MUST have automation through server-side Unix/Linux shell scripting technical knowledge
• Work with the vendors in areas of technical support, upgrade DevOps tools, etc
• Configuring server side items - SSO, SSL, Load Balancer, Auto Scaling and DNS setup

Key Domain/ Technical Skills (Must Have)

• · Knowledge of DevOps Tools
• · Technical hands-on knowledge in Dynamic Application Security Testing (DAST) HCL AppScan
• · Deep Technical hands-on knowledge in Atlassian stack (Jira, Confluence, Bitbucket)
• · Deep Technical hands-on knowledge in platforms such as Jenkins, SonarQube, Artifactory, xRay
• · Debug and Issue Troubleshooting
• · Debug, troubleshooting, diagnose, fix platforms related issues for all the above DevOps tools
• · Debug, troubleshooting, diagnose, fix groovy scripts issues (runtime Build, Deploy, Scan, etc)
• · Pipeline development and Automation
• · Hand-on experience in coding, developing and maintaining CI/CD build, deploy pipelines
• · Deep Technical experience in automation with groovy scripts.
• · Deep technical experience in server-side Unix/Linux shell scripting.
• · Able to develop and enhance new automation scripts thru Jenkins pipelines (Groovy scripts, APIs)
• · Platform Tool Support
• · Prior working experience installing, configuring, integrating, upgrading and patching CI/CD toolset.
• · MUST be able to work in stretch example: off-office hours support (weekends, holidays)
• · Support and maintain all DevOps platform tools uptime to meet SLA
• · Support DevOps pipelines issues (Build, Scan, Deploy, Run, Test) phases of DevOps
• · Support to DevOps champions and development team
• · Should:
• · Build relationships with DevOps domain champions, development communities and developers
• · Comfortable working in a challenging environment
• · Able to design a strategy and then execute against it
• · Manage delivery of complex projects by simplifying into smaller deliveries
• · Ability to benchmark industry standard tools and implement it UOB
• · Advantageous
• · Knowledge of SRE best practices
• · Implement SLI, SLO key indicators to this role
• · Extensive background in working with service support teams Infrastructure, Network, Storage, Security, Operations
• · Self-directed and comfortable working in ambiguous environments
• Experience working in a highly matrixed organization