Senior DevSecOps Engineer | Healthtech Platform Security

AJENTIK AI PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Benefits offered by this job

Equity participation

Security ownership

ISO training

Small team

Health benefits

Training budget

Career growth

Job summary

Ajentik AI Pte. Ltd. is hiring a DevSecOps Engineer to own how Elderwise is built, shipped and run securely in Singapore.

You will ensure secure delivery by integrating SAST, secret scanning, SBOMs and signed artefacts into GitHub Actions and Argo CD-based pipelines. You will collaborate with platform engineers and founders across cloud, partner-hosted and on-premise environments, managing infrastructure-as-code, Kubernetes hardening, incident response, and data protection to support ISO

Qualifications

• 3+ years in DevOps, platform, SRE or security engineering, with 2+ years running Kubernetes
• Infrastructure as code with Terraform or OpenTofu: module design, remote state and safe change workflows
• Hands-on CI/CD and GitOps experience, with security tooling integrated into pipelines
• Strong AWS fundamentals (IAM, networking, KMS, storage); exposure to Azure or other clouds is useful
• Solid Linux, networking, TLS and DNS knowledge
• Scripting in Python, Bash or Go
• Experience working inside a security or compliance scope such as ISO 27001 or SOC 2
• A calm, methodical approach to incidents, and documentation good enough for someone else to follow

Responsibilities

• Own CI/CD for our backend, web and mobile apps (GitHub Actions, with GitOps through Argo CD), with security gates built in
• Build and maintain infrastructure as code with OpenTofu across a hybrid-cloud footprint, with no manual changes in production
• Harden and operate Kubernetes: default-deny network policies, workload identity, admission controls, upgrades and capacity planning
• Run secrets, identity and access on least privilege, including key rotation, periodic access reviews and secure handling of model and API credentials
• Own observability, alerting and incident response: logs, metrics, traces, on-call runbooks and blameless post-incident reviews
• Protect data end to end: encryption at rest and in transit, Singapore data residency, tested backups and disaster-recovery drills
• Secure our AI systems with the AI team: model gateway controls, egress restrictions, prompt-injection defences, and logs that support debugging without exposing personal data
• Implement and evidence ISO 27001 controls in our compliance platform (Drata), and support our ISO 42001, PDPA and customer audit work
• Package Elderwise for deployment into hospital and partner environments, including private cloud and on-premise, and support customer security reviews, VAPT and network documentation
• Run vulnerability management and coordinate penetration tests, tracking every finding to closure
• Treat cloud cost as an engineering metric and keep it under control

Skills

CI/CD

GitOps

Kubernetes

Terraform

OpenTofu

Python

Bash

Go

AWS

Security

Tools

GitHub Actions

Argo CD

OpenTofu

Terraform

TLS/DNS

KMS

Vulnerability scanning

Job description

Ajentik AI Pte. Ltd. is hiring a DevSecOps Engineer to own how Elderwise is built, shipped and run securely in Singapore.

You will ensure secure delivery by integrating SAST, secret scanning, SBOMs and signed artefacts into GitHub Actions and Argo CD-based pipelines. You will collaborate with platform engineers and founders across cloud, partner-hosted and on-premise environments, managing infrastructure-as-code, Kubernetes hardening, incident response, and data protection to support ISO