DevSecOps Engineer at TOPPAN ECQUARIA PTE. LTD. – Singapore | Jobyssey

Key Responsibilities

Design, implement, and manage secure and scalable infrastructure on both cloud platforms (AWS/Azure) and on-premise virtualization environments (Hyper-V, ESXi, Proxmox VE, etc.).
Experience on implementation with Infrastructure as Code (IaC) tools, especially Terraform
Set up and maintain middleware such as NGINX and ATS.
Implement observability (o11y) stacks such as Grafana Stack.
Deploy and manage Kubernetes clusters including k3s, k0s, and managed services like AWS EKS.
Provision and manage databases including AWS RDS, PostgreSQL, MySQL, Oracle, and Microsoft SQL Server.
Administer and secure on-premise server infrastructure, including hypervisor management, patching, and performance tuning.
Collaborate with development and operations teams to troubleshoot and resolve infrastructure and security-related issues.
Monitor systems for security threats, respond to incidents, and conduct post-mortem analysis.
Manage and enforce access control policies across various systems and platforms.
Champion and integrate security best practices ("shifting left") into the software development lifecycle, from code to deployment.
Develop, maintain, and optimize our CI/CD pipelines, with a primary focus on GitLab CI, to ensure rapid, reliable, and secure software delivery.
Automate security testing, vulnerability scanning, and compliance checks within the deployment process.
Stay current with emerging security threats, technologies, and industry best practices.

Technical Expertise & Experience

Proven experience as a DevOps, Site Reliability, or Systems Engineer with a strong focus on security.
Hands-on experience managing cloud environments in either AWS or Azure (e.g., IAM, VPC, Security Groups, EC2, S3, Azure AD, NSGs).
Solid experience in on-premise server administration and virtualization using platforms like Hyper-V, VMware ESXi, or Proxmox VE.
Demonstrable experience with CI/CD concepts and tools, particularly GitLab CI.
Familiarity with security tools for static/dynamic analysis (SAST/DAST), container scanning, and dependency checking.
Strong understanding of networking principles, firewalls, and secure network design.

Technical Core

A background in software development, particularly with Java, is a significant plus.
Knowledge of containerization and orchestration technologies (Docker, Kubernetes).
Experience with scripting languages (e.g., Python, Bash, PowerShell) for automation.
Cloud certifications (e.g., AWS Certified Solutions Architect, Azure Administrator Associate).

Explore more jobs