全职 DevSecOps Engineer 工作, 薪水 up to SGD 9,000, CMC APAC 公司招聘中 - Ricebowl

About the role

CMC APAC is hiring DevSecOps Engineers for projects with Singapore public sector clients. You will build and run secure, automated delivery on AWS, work closely with development teams to build security into every release, and keep cloud platforms reliable and compliant in a regulated environment.

What you will do

• Build, configure and maintain CI/CD pipelines (GitLab or similar) for build, test, release and deployment
• Provision and manage AWS infrastructure and platform services using Infrastructure as Code
• Automate deployment and operational tasks through scripting and automation tools
• Deploy and support containerised workloads on Docker and Kubernetes
• Set up and maintain monitoring, logging, alerting and dashboards for platform health, performance and availability
• Review findings from security scanning tools (SAST, DAST, SCA, container scanning) and work with developers to prioritise and fix vulnerabilities
• Apply security controls, system hardening and compliance checks in line with government security requirements
• Support security reviews, accreditation, audits and compliance assessments
• Troubleshoot system, application and infrastructure issues, and support incident response and root cause analysis
• Maintain technical documentation, operational procedures and security artefacts

What you bring

• Hands-on experience with AWS, including IAM, networking, compute, monitoring and security services
• Experience with CI/CD platforms and source control workflows, especially GitLab (Jenkins or Azure DevOps also relevant)
• Experience with Infrastructure as Code tools such as Terraform or Ansible
• Experience with Docker and Kubernetes
• Scripting in Python, Bash or PowerShell
• Understanding of the secure SDLC, secure coding practices and DevSecOps principles
• Experience reading security scan results and driving fixes with development teams
• Experience with monitoring and observability tools such as CloudWatch, Prometheus or Grafana
• Strong troubleshooting, communication and stakeholder management skills, and comfort working across multiple development teams

Nice to have

• Experience in government, defence or other regulated environments
• Cloud-native tooling such as Helm, ArgoCD or Istio
• Security and secrets management tools such as HashiCorp Vault, Fortify, Sonatype Nexus IQ or Tenable
• Experience linking CI/CD with ITSM and change management tools such as Jira Service Management
• Certifications such as AWS (Solutions Architect, DevOps Engineer, SysOps Administrator), CKA, CKAD, CKS, CompTIA Security+ or CISSP

Job Type: Full-time

Pay: $6,000.00 - $9,000.00 per month

Work Location: In person