Senior DevSecOps Engineer (AWS Cloud Security)

CMC-APAC PRIVATE LIMITED; Singapore; Presencial; SGD 120.000 - 180.000; Jornada completa

Descripción de la vacante

CMC-APAC PRIVATE LIMITED is seeking an experienced Senior DevSecOps Engineer to lead secure cloud-native infrastructure, governance, and DevSecOps practices in an enterprise environment. You will drive infrastructure security, CI/CD automation, and incident response across AWS, EKS/ECS, and related services.

Responsibilities include designing security baselines, implementing least-privilege IAM, and mentoring teams while collaborating with stakeholders on compliance.

Formación

• 3–5 years hands-on DevOps, cloud infrastructure, or DevSecOps.
• Senior Consultant: 7+ years including 2–3 years defining secure cloud architecture or leading DevSecOps implementations.

Responsabilidades

• Lead the design, implementation, and operation of secure cloud-native infrastructure and DevSecOps practices.
• Implement secure CI/CD pipelines using GitLab.
• Integrate automated security controls including SAST, dependency scanning, secret scanning, container image scanning, and IaC scanning.
• Establish quality and security gates within deployment pipelines.
• Enforce least-privilege IAM, network segmentation, container hardening, system hardening, mutual TLS (mTLS), and encryption at rest and in transit.
• Develop and maintain security baselines and infrastructure standards.
• Configure observability, monitoring, logging, and alerting; use Dynatrace and Datadog.
• Support production deployments and incident response; create operational runbooks; implement backup and disaster recovery procedures.
• Integrate enterprise authentication (AD/SSO, SAML, OIDC) and centralized account management systems.
• Mentor teams on DevSecOps best practices and promote a security-first culture.

Conocimientos

Leadership

Herramientas

AWS Cloud Infra

Terraform

Docker

Kubernetes

Amazon EKS

CI/CD pipelines

Deployment automation

Infrastructure security

Application security

Monitoring & incident mgmt

Dynatrace

Datadog

Secrets management

Descripción del empleo

About the Role

We are seeking an experienced Senior DevSecOps Engineer to lead the design, implementation, and operation of secure cloud-native infrastructure and DevSecOps practices in an enterprise environment. This role requires strong expertise across cloud infrastructure, security engineering, CI/CD automation, platform operations, and cloud governance.

Key Responsibilities

Cloud Infrastructure & Platform Engineering

• Build and manage AWS cloud infrastructure using Terraform or equivalent Infrastructure-as-Code tools.
• Provision and maintain Amazon VPC, Amazon EKS/ECS, RDS, and container registries.
• Manage development, staging, and production environments.

DevSecOps & CI/CD

• Implement secure CI/CD pipelines using GitLab.
• Integrate automated security controls including SAST, dependency scanning, secret scanning, container image scanning, and Infrastructure-as-Code scanning.
• Establish quality and security gates within deployment pipelines.

Security Engineering

• Implement and enforce least-privilege IAM, EKS Pod Identity, network segmentation, container hardening, system hardening, mutual TLS (mTLS), secrets management, and encryption at rest and in transit.
• Develop and maintain security baselines and infrastructure standards.

Monitoring & Operations

• Configure observability, monitoring, logging, and alerting.
• Utilize monitoring platforms such as Dynatrace and Datadog.
• Support production deployments and incident response activities.
• Create and maintain operational runbooks.
• Implement and validate backup and disaster recovery procedures.

Identity & Access Management

• Integrate enterprise authentication and authorization solutions including ADFS, Active Directory, SAML, OIDC, and centralized account management systems.

Leadership & Governance

• Define cloud platform security architecture and standards.
• Conduct security reviews and vulnerability remediation activities.
• Collaborate with stakeholders on security and compliance requirements.
• Mentor engineering teams on DevSecOps best practices and promote a security-first engineering culture.

Mandatory Requirements

Experience

• Consultant : 3-5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience.
• Senior Consultant : 7+ years of experience, including at least 2-3 years defining secure cloud architecture or leading DevSecOps implementation.
• Experience with Singapore Government or public sector security and compliance requirements is an advantage.

Technical Skills

• Strong hands-on experience with AWS Cloud Infrastructure.
• Experience with Terraform or equivalent Infrastructure-as-Code technologies.
• Experience with Docker, Kubernetes, and Amazon EKS.
• Experience implementing CI/CD pipelines and deployment automation.
• Experience in infrastructure security, application security, and secure‑by‑design practices.
• Experience supporting production environments, monitoring, and incident management.

Preferred Skills

• Experience with Dynatrace and Datadog .
• Experience supporting or deploying applications built with Golang, Kotlin, Next.js, TypeScript, or Temporal on Kubernetes.
• Knowledge of ADFS, Active Directory, SAML, and OIDC.
• Exposure to Trend Micro FAM, OutSystems, Oracle Policy Automation (OPA), Oracle Intelligent Advisor (OIA), Sitefinity, and Oracle technologies.