DevSecOps Engineer

Responsibilities

1. Design, develop, and maintain secure, scalable and resilient cloud infrastructure and application environments.
2. Build and enhance CI/CD pipelines to automate software builds, testing, integration, deployment and release processes.
3. Implement Infrastructure-as-Code (IaC) and automation using tools such as Terraform, Ansible or equivalent technologies.
4. Deploy, manage and optimise AWS cloud resources, platform services and cloud-native applications.
5. Work with Docker and Kubernetes to support containerised applications and modern application deployment.
6. Implement monitoring, logging and observability solutions to improve platform availability, performance, reliability and operational health.
7. Integrate security throughout the Software Development Lifecycle (SDLC), working closely with developers and engineering teams.
8. Conduct vulnerability assessments, security reviews, system hardening, threat and risk assessments, and remediation activities.
9. Troubleshoot and resolve complex system, application, cloud and infrastructure issues, including supporting incident response activities.
10. Implement and maintain backup, disaster recovery and business continuity measures while collaborating with cross-functional teams to continuously improve platform security and reliability.

Requirements

1. Strong understanding of SDLC, CI/CD,DevSecOps and Test-Driven Development (TDD) practices.
2. Hands-on experience designing, deploying and supporting AWS cloud-native applications and infrastructure; experience with GCC or regulated/government environments will be advantageous.
3. Proficiency in at least two programming or scripting languages, such as Python, Bash, PowerShell, JavaScript or Java.
4. Practical experience with Terraform/Ansible, Docker, Kubernetes, GitLab and CI/CD platforms, together with monitoring and observability solutions.
5. Good knowledge of application security,cloud security, secure coding, vulnerability management, system hardening and remediation.
6. Familiarity with modern cloud-native and security tools such as Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane, HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ and AWS security services will be an advantage.

Clarence Khoh
R1552376