DevSecOps Engineer (EdTech Company)

About Us We are a fast-growing SaaS company serving the education sector across Southeast Asia. Our platform supports thousands of educators, administrators, and parents daily. As we continue to scale, we are looking for a hands-on DevSecOps Engineer to strengthen our cloud infrastructure, security posture, automation capabilities, and development operations. Role Overview As our DevSecOps Engineer, you will be responsible for optimizing and securing our AWS infrastructure while improving system reliability, availability, monitoring, and automation. This role combines infrastructure engineering, cybersecurity operations, and development support to ensure our SaaS platform remains secure, scalable, and highly available. This is a highly impactful role where you will work closely with the engineering and product teams to drive infrastructure improvements, security enhancements, and operational excellence. Key Responsibilities Infrastructure Optimization & Reliability (Primary Focus) • Design, manage, and optimize AWS cloud infrastructure to improve performance, scalability, security, and cost efficiency. • Review and enhance server architecture to improve availability and fault tolerance. • Implement infrastructure improvements such as:Migrating databases and critical services into private networks/subnets.Strengthening network segmentation and access controls.Improving backup, disaster recovery, and business continuity strategies. • Manage and optimize AWS services including EC2, RDS, ECS/EKS, VPC, Route 53, CloudFront, S3, IAM, Lambda, and related services. • Establish Infrastructure as Code (IaC) using Terraform, CloudFormation, or equivalent tools. • Implement high-availability and redundancy strategies for mission-critical services. Monitoring, Logging & Automation • Design and maintain centralized logging, monitoring, and alerting systems. • Build operational dashboards and proactive alerting mechanisms. • Develop automated incident response and notification workflows. • Monitor infrastructure health, performance metrics, and capacity utilization. • Automate routine operational tasks to improve efficiency and reduce manual intervention. Security & Compliance (Second Priority) • Strengthen the organization's cybersecurity posture across cloud infrastructure and applications. • Manage and respond to alerts from AWS Security Hub, GuardDuty, WAF, and other security solutions. • Investigate, remediate, and document security findings and vulnerabilities. • Conduct security hardening for servers, databases, applications, and cloud environments. • Implement and maintain security best practices including:IAM governanceLeast privilege accessNetwork security controlsVulnerability managementSecrets management • Support compliance initiatives such as ISO 27001, ISO 27017, and ISO 27018. Development & Platform Support • Collaborate with developers to improve CI/CD pipelines and deployment processes. • Support software release management and environment configuration. • Develop internal tools, scripts, and automation to improve engineering productivity. • Assist in troubleshooting application performance and production issues. • Contribute to platform improvements and backend development when required. Requirements Technical Skills • 4+ years of experience in DevOps, DevSecOps, Cloud Infrastructure, or Site Reliability Engineering roles. • Strong hands-on experience with AWS cloud services. • Experience managing Linux-based production environments. • Strong understanding of networking concepts including VPC, VPN, Security Groups, NACLs, DNS, and Load Balancers. • Experience with Infrastructure as Code (Terraform, CloudFormation, or equivalent). • Experience with CI/CD tools such as GitHub Actions, GitLab CI/CD, Jenkins, or similar. • Experience with monitoring and observability platforms. • Knowledge of cybersecurity principles, vulnerability management, and cloud security best practices example: Owasp, Singapore PDPC laws and regulations. • Strong scripting or programming skills in Python, Bash, Node.js, or similar languages. • Experience working with databases such as MySQL, PostgreSQL, or MongoDB. Preferred Qualifications • AWS certifications (Solutions Architect, DevOps Engineer, Security Specialty). • Experience with containerization technologies such as Docker and Kubernetes. • Experience with Security Hub, GuardDuty, WAF, SIEM, or endpoint security solutions. • Experience supporting ISO 27001 implementation and audits. • Familiarity with SaaS environments and multi-tenant architectures.