DevSecOps Engineer - #1659

Responsibilities • Design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS , including runners, branching/merge controls and access management. • Integrate Fortify, Nexus IQ and SonarQube into CI/CD pipelines and implement appropriate security and quality gates. • Apply shift-left security practices across the SDLC, covering code, dependencies, containers and application deployments. • Automate application build, testing, security scanning and deployment across development and production environments. • Support containerised application deployment using Docker and Kubernetes/EKS . • Manage pipeline credentials, secrets and service accounts securely. • Develop reusable pipeline templates and standardise DevSecOps practices across AE applications. • Troubleshoot pipeline, security scanning and deployment issues and support developers in resolving identified findings. Experience and Skills Needed • Degree or Diploma in Computer Science, Information Technology, Software/Computer Engineering or related discipline. • Hands-on experience with GitLab CI/CD , including pipeline configuration and GitLab Runners. • Good understanding of SDLC, DevSecOps and shift-left security , including SAST, DAST, Software Composition Analysis (SCA) and security gates. • Experience integrating application security and code-quality tools, preferably Fortify, Nexus IQ and SonarQube , into CI/CD pipelines. • Experience with Git, Docker and Kubernetes , with working knowledge of AWS/EKS environments. • Scripting experience using Python, Bash, PowerShell or equivalent . • Working knowledge of Linux, networking, access control and secrets management . • Strong troubleshooting skills across CI/CD, security tooling and application deployment. Added Advantage • Hands-on experience with SHIP-HATS , particularly CI/CD and DevSecOps implementation. • Experience with Infrastructure as Code using Terraform, Ansible or AWS CloudFormation . • Experience with Helm, Argo CD or similar Kubernetes deployment/GitOps tools. • Knowledge of SBOM and software supply-chain security . • Experience with DevSecOps implementation in Singapore Government or regulated environments.