DevOps Engineer

We are looking for an experienced DevOps Engineer to join our infrastructure/platform team under our sister company, AngelHack Developer Labs. You will design, build, and maintain scalable cloud infrastructure and CI/CD pipelines, with a strong focus on AWS and Red Hat OpenShift environments. This role has a strong DevSecOps component — you will be expected to embed security practices throughout the development and deployment lifecycle, not treat it as an afterthought.

Key Responsibilities

Infrastructure & Platform

• Design, implement, and maintain infrastructure-as-code (IaC) for AWS cloud environments
• Deploy, manage, and optimize containerized applications on Red Hat OpenShift (OKD/OCP)
• Manage Kubernetes/OpenShift clusters, including scaling, upgrades, and patching
• Troubleshoot and resolve infrastructure, networking, and deployment issues

CI/CD & Automation

• Build and maintain CI/CD pipelines to support development and release cycles
• Automate repetitive operational tasks to improve deployment speed and reliability
• Implement pipeline security gates (e.g., automated approval blocks on failed scans)

DevSecOps / Security Integration

• Embed security checks across the SDLC ("shift left") — including static application security testing (SAST), dynamic testing (DAST), and software composition analysis (SCA)
• Perform container/image vulnerability scanning before deployment to OpenShift (e.g., Trivy, Clair, Red Hat ACS/StackRox)
• Manage secrets securely using tools like HashiCorp Vault, AWS Secrets Manager, or OpenShift Secrets
• Implement policy-as-code and compliance-as-code (e.g., Open Policy Agent, OPA Gatekeeper) to enforce security and governance guardrails
• Apply IAM least-privilege principles across AWS and OpenShift RBAC configurations
• Monitor for security vulnerabilities, misconfigurations, and compliance drift in infrastructure and pipelines
• Support security audits, vulnerability remediation, and incident response processes
• Collaborate with security teams to align with organizational compliance frameworks

Monitoring & Reliability

• Implement and maintain monitoring, logging, and alerting solutions (e.g., Prometheus, Grafana, ELK/EFK)
• Support disaster recovery, backup strategies, and incident response procedures
• Document infrastructure architecture, security controls, runbooks, and operational procedures

Requirements

• Singapore Citizen, based in Singapore
• 3–5 years of relevant DevOps/DevSecOps/Platform Engineering experience
• Hands‑on experience with AWS (EC2, S3, VPC, IAM, Lambda, RDS, CloudFormation/Terraform, etc.)
• Practical experience with Red Hat OpenShift (deployment, cluster management, operators, RBAC)
• Solid understanding of containerization technologies (Docker, Kubernetes)
• Experience with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions, Tekton)
• Working knowledge of security scanning tools (SAST/DAST/SCA — e.g., SonarQube, Snyk, Checkmarx, OWASP ZAP)
• Experience with container/image scanning tools (Trivy, Clair, Aqua, or Red Hat ACS)
• Familiarity with secrets management tools (Vault, AWS Secrets Manager)
• Proficiency in scripting languages (Bash, Python, or Go)
• Familiarity with configuration management tools (Ansible, Chef, or Puppet)
• Understanding of networking fundamentals (DNS, load balancing, firewalls, VPNs)
• Experience with monitoring/logging tools (Prometheus, Grafana, ELK/EFK stack)
• Strong problem‑solving skills and ability to work independently under pressure
• Good communication skills and ability to collaborate across Dev, Ops, and Security teams

Good to Have

• AWS Certification (Solutions Architect, DevOps Engineer, or SysOps Administrator)
• Red Hat Certified Specialist in OpenShift Administration (or equivalent)
• Security certifications (e.g., CompTIA Security+, Certified Kubernetes Security Specialist - CKS)
• Experience with GitOps tools (ArgoCD, Flux)
• Exposure to compliance frameworks relevant to your industry (e.g., MAS TRM, ISO 27001, PCI-DSS)
• Experience working in Agile/Scrum environments