Senior DevSecOps Engineer - GitLab CI/CD & Cloud Security

JOBSTER PRIVATE LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

JOBSTER PRIVATE LTD. is seeking an experienced DevSecOps engineer to design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS in a Singapore environment.

You will integrate Fortify, Nexus IQ and SonarQube, applying shift-left security across the SDLC and automating builds, tests, security scans and deployments. Responsibilities include containerised deployments with Docker/Kubernetes (EKS) and secure management of credentials and secrets, plus creating reusable templates

Qualifications

• Degree or Diploma in Computer Science, Information Technology or related discipline.
• Hands-on experience with GitLab CI/CD pipelines and runners.
• Strong understanding of SDLC, DevSecOps and shift-left security (SAST/DAST/SCA, security gates).
• Experience integrating Fortify, Nexus IQ and SonarQube into CI/CD pipelines.
• Experience with Git, Docker and Kubernetes, with AWS/EKS environments.
• Scripting in Python, Bash, PowerShell or equivalent.
• Working knowledge of Linux, networking, access control and secrets management.
• Strong troubleshooting skills across CI/CD, security tooling and deployments.
• Added Advantage: SHIP-HATS experience; IaC with Terraform/Ansible/AWS CloudFormation; Helm/Argo CD; SBOM knowledge; Gov/regulatory DevSecOps experience.

Responsibilities

• Design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS.
• Integrate Fortify, Nexus IQ and SonarQube into CI/CD pipelines and implement security gates.
• Apply shift-left security across the SDLC including code, dependencies, containers and deployments.
• Automate build, testing, security scanning and deployment across dev and prod environments.
• Support containerised deployment using Docker and Kubernetes/EKS.
• Manage pipeline credentials, secrets and service accounts securely.
• Develop reusable pipeline templates and standardise DevSecOps practices across AE apps.
• Troubleshoot pipeline, security scanning and deployment issues and assist developers with findings.

Skills

GitLab CI/CD

DevSecOps

Shift-left security

Docker

Kubernetes

AWS/EKS

Python

Bash

Linux

Secrets management

SAST

DAST

SCA

Fortify

Nexus IQ

SonarQube

Terraform

Ansible

AWS CloudFormation

Helm

Argo CD

SBOM

Education

Degree or Diploma in CS/IT

Tools

GitLab Runners

Fortify

Nexus IQ

SonarQube

Terraform

Ansible

AWS/EKS

Job description

JOBSTER PRIVATE LTD. is seeking an experienced DevSecOps engineer to design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS in a Singapore environment.

You will integrate Fortify, Nexus IQ and SonarQube, applying shift-left security across the SDLC and automating builds, tests, security scans and deployments. Responsibilities include containerised deployments with Docker/Kubernetes (EKS) and secure management of credentials and secrets, plus creating reusable templates