DevSecOps Engineer
Posted 1
view
Responsibilities
- Design, develop, and maintain secure, scalable and resilient cloud infrastructure and application environments.
- Build and enhance CI/CD pipelines to automate software builds, testing, integration, deployment and release processes.
- Implement Infrastructure-as-Code (IaC) and automation using tools such as Terraform, Ansible or equivalent technologies.
- Deploy, manage and optimise AWS cloud resources, platform services and cloud-native applications.
- Work with Docker and Kubernetes to support containerised applications and modern application deployment.
- Implement monitoring, logging and observability solutions to improve platform availability, performance, reliability and operational health.
- Integrate security throughout the Software Development Lifecycle (SDLC), working closely with developers and engineering teams.
- Conduct vulnerability assessments, security reviews, system hardening, threat and risk assessments, and remediation activities.
- Troubleshoot and resolve complex system, application, cloud and infrastructure issues, including supporting incident response activities.
- Implement and maintain backup, disaster recovery and business continuity measures while collaborating with cross-functional teams to continuously improve platform security and reliability.
Requirements
- Strong understanding of SDLC, CI/CD,DevSecOps and Test-Driven Development (TDD) practices.
- Hands-on experience designing, deploying and supporting AWS cloud-native applications and infrastructure; experience with GCC or regulated/government environments will be advantageous.
- Proficiency in at least two programming or scripting languages, such as Python, Bash, PowerShell, JavaScript or Java.
- Practical experience with Terraform/Ansible, Docker, Kubernetes, GitLab and CI/CD platforms, together with monitoring and observability solutions.
- Good knowledge of application security,cloud security, secure coding, vulnerability management, system hardening and remediation.
- Familiarity with modern cloud-native and security tools such as Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane, HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ and AWS security services will be an advantage.
Clarence Khoh
R1552376