DevSecOps Engineer

Responsibilities • Design, develop, and maintain secure, scalable and resilient cloud infrastructure and application environments. • Build and enhance CI/CD pipelines to automate software builds, testing, integration, deployment and release processes. • Implement Infrastructure-as-Code (IaC) and automation using tools such as Terraform, Ansible or equivalent technologies. • Deploy, manage and optimise AWS cloud resources, platform services and cloud-native applications. • Work with Docker and Kubernetes to support containerised applications and modern application deployment. • Implement monitoring, logging and observability solutions to improve platform availability, performance, reliability and operational health. • Integrate security throughout the Software Development Lifecycle (SDLC), working closely with developers and engineering teams. • Conduct vulnerability assessments, security reviews, system hardening, threat and risk assessments, and remediation activities. • Troubleshoot and resolve complex system, application, cloud and infrastructure issues, including supporting incident response activities. • Implement and maintain backup, disaster recovery and business continuity measures while collaborating with cross-functional teams to continuously improve platform security and reliability. Requirements • Strong understanding of SDLC, CI/CD,DevSecOps and Test-Driven Development (TDD) practices. • Hands-on experience designing, deploying and supporting AWS cloud-native applications and infrastructure; experience with GCC or regulated/government environments will be advantageous. • Proficiency in at least two programming or scripting languages, such as Python, Bash, PowerShell, JavaScript or Java. • Practical experience with Terraform/Ansible, Docker, Kubernetes, GitLab and CI/CD platforms, together with monitoring and observability solutions. • Good knowledge of application security,cloud security, secure coding, vulnerability management, system hardening and remediation. • Familiarity with modern cloud-native and security tools such as Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane, HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ and AWS security services will be an advantage. Clarence Khoh R1552376