Senior DevOps Engineer, Video Intelligence

NCS Pte Ltd; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

NCS Pte Ltd is seeking a Senior DevOps Engineer to own the security, reliability, and delivery of our Azure platform and Kubernetes workloads. You will be the hands-on engineer for secure-by-default infrastructure-automating everything-as-code, collaborating with product teams to enable fast shipping without compromising security or resilience.

Responsibilities span Platform engineering (Azure), AKS, CI/CD, secret management, observability, cloud security posture, networking, DR, FinOps, and

Qualifications

• 7+ years in DevOps/SRE/Platform Engineering.
• 3+ years on Azure; 2+ years operating Kubernetes in production.
• Delivery of Azure Landing Zones or equivalent foundations via Terraform or Bicep modules.
• Strong with GitHub Actions/Azure DevOps, artifacts, environments, approvals, reusable workflows.
• Hands-on with container runtime security & policy: OPA/Gatekeeper or Kyverno, Pod Security configured and read-only root FS.

Responsibilities

• Own the security, reliability, and delivery of our Azure platform and Kubernetes workloads.
• Build and evolve Azure Landing Zones, Management Group hierarchy, policy-as-code guardrails.
• Design & operate private AKS clusters and implement Pod Security Standards and network policies.
• Standardize pipelines in GitHub Actions / Azure DevOps with SBOM, image scanning, cosign signing/verification, and GitOps (Argo CD/Flux).
• Implement Entra ID RBAC & PIM, Managed Identities, Key Vault / Secrets Store CSI, and secret rotation practices.
• Establish Azure Monitor / Log Analytics baselines, tracing, SLOs, and alerts; integrate with Sentinel; lead incident response.

Skills

DevOps engineering

SRE practices

GitOps

Incident response

Automation

Education

Bachelor's degree not specified

Tools

Azure

AKS

Terraform

Bicep

GitHub Actions

Azure DevOps

OPA/Gatekeeper

Kyverno

Nessus

Cosign

Argo CD

Flux

Nginx

Calico

Job description

Company Description

NCS is a leading AI Tech Services company. With a 15,000-strong team across the Asia Pacific, NCS scales its platforms and capabilities to provide clients with greater agility and AI expertise across a range of Industries. Embracing a strong ecosystem of global partners, NCS transforms technology services delivery combining AI with digital resilience to drive real business impact. NCS is a subsidiary of the Singtel Group.

Job Description

We’re looking for a Senior DevOps Engineer to own the security, reliability, and delivery of our Azure platform and Kubernetes workloads. You’ll be the hands-on technical engineer for secure-by-default infrastructure-automating everything-as-code, and partnering with product teams to do deployment and enabling fast shipping of codes without trading off security or resilience.

Responsibilities:

Platform engineering (Azure)

• Build and evolve Azure Landing Zones, Management Group hierarchy, subscription vending, and policy-as-code guardrails using Azure Policy or equivalent tools.

Kubernetes (AKS)

• Design & operate private AKS clusters (Azure CNI/Calico etc), implement Pod Security Standards, network policies (Calico/Cilium), workload identity (Entra OIDC/Workload Identity), and secure ingress/egress.

CI/CD & supply chain

• Standardize pipelines in GitHub Actions / Azure DevOps; enforce SBOM, image scanning, cosign signing/verification, provenance (SLSA-aligned) and immutable deploys (GitOps with Argo CD/Flux).

Identity & secrets

• Implement Entra ID RBAC & PIM, Managed Identities, Key Vault / Secrets Store CSI, and secret rotation practices.

Observability & IR

• Establish Azure Monitor / Log Analytics baselines, tracing, SLOs, and actionable alerts; integrate with Microsoft Sentinel; lead incident response and postmortems.

Cloud security posture

• Drive Defender for Cloud coverage, vulnerability management (containers, hosts, code), and automated remediation.

Networking & data protection

• Hub-and-spoke or vWAN, Private Link/Endpoints, Private DNS, Firewall/NAT Gateway egress control; encryption at rest & in transit, KMS integrations.

Resilience & DR

• Backups (RSV/Velero), multi-region patterns, chaos exercises, capacity planning; codify DR runbooks and perform tests.

FinOps & compliance

• Implement tagging/budgets, right-sizing, Reservations/Savings Plans; map controls to CIS/NIST/ISO and produce audit evidence from pipelines.

Coaching & enablement

• Pair with product teams, review designs/PRs, write reference modules/templates, and uplift platform literacy across the org.

Security Hardening

• Enable hardening for respective components, including but not limited to OS hardening, Application Hardening, Azure Services hardening.

Qualifications

• 7+ years in DevOps/SRE/Platform Engineering with 3+ years on Azure and 2+ years operating Kubernetes in production.
• Proven delivery of Azure Landing Zones or equivalent enterprise Azure foundations, expressed asTerraform or Bicep modules.
• Strong with GitHub Actions/Azure DevOps, artifacts, environments, approvals, reusable workflows.
• Hands-on with container runtime security & policy: OPA/Gatekeeper or Kyverno, Pod Security restricted, read-only root FS, capability drops, seccomp/AppArmor.
• Network security in K8s: NetworkPolicy default-deny, ingress controllers (Nginx/AGIC), egress control, TLS everywhere, mTLS preferred.
• Image lifecycle: private registries (ACR), pull-through caches, cosign signing & admission verification, Nessus scanning.
• Observability: Azure Monitor/Logs, DCRs, dashboards, SLOs, alert routing to ITSM; experience integrating with Sentinel or enterprise SIEM.
• Infra & config as code at scale; linting/testing/policy gates; change automation and drift detection (GitOps).
• Solid Linux fundamentals, networking, PKI, and incident response.

Additional Information

We are driven by our AEIOU beliefs-Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.