Senior DevSecOps Engineer: AWS Cloud Security Lead

CMC-APAC PRIVATE LIMITED; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

CMC-APAC PRIVATE LIMITED is seeking an experienced Senior DevSecOps Engineer to lead secure cloud-native infrastructure, governance, and DevSecOps practices in an enterprise environment. You will drive infrastructure security, CI/CD automation, and incident response across AWS, EKS/ECS, and related services.

Responsibilities include designing security baselines, implementing least-privilege IAM, and mentoring teams while collaborating with stakeholders on compliance.

Qualifications

• 3–5 years hands-on DevOps, cloud infrastructure, or DevSecOps.
• Senior Consultant: 7+ years including 2–3 years defining secure cloud architecture or leading DevSecOps implementations.

Responsibilities

• Lead the design, implementation, and operation of secure cloud-native infrastructure and DevSecOps practices.
• Implement secure CI/CD pipelines using GitLab.
• Integrate automated security controls including SAST, dependency scanning, secret scanning, container image scanning, and IaC scanning.
• Establish quality and security gates within deployment pipelines.
• Enforce least-privilege IAM, network segmentation, container hardening, system hardening, mutual TLS (mTLS), and encryption at rest and in transit.
• Develop and maintain security baselines and infrastructure standards.
• Configure observability, monitoring, logging, and alerting; use Dynatrace and Datadog.
• Support production deployments and incident response; create operational runbooks; implement backup and disaster recovery procedures.
• Integrate enterprise authentication (AD/SSO, SAML, OIDC) and centralized account management systems.
• Mentor teams on DevSecOps best practices and promote a security-first culture.

Skills

Leadership

Tools

AWS Cloud Infra

Terraform

Docker

Kubernetes

Amazon EKS

CI/CD pipelines

Deployment automation

Infrastructure security

Application security

Monitoring & incident mgmt

Dynatrace

Datadog

Secrets management

Job description

CMC-APAC PRIVATE LIMITED is seeking an experienced Senior DevSecOps Engineer to lead secure cloud-native infrastructure, governance, and DevSecOps practices in an enterprise environment. You will drive infrastructure security, CI/CD automation, and incident response across AWS, EKS/ECS, and related services.

Responsibilities include designing security baselines, implementing least-privilege IAM, and mentoring teams while collaborating with stakeholders on compliance.