DevSecOps Engineer

**🌟 We're Hiring: DevSecOps Engineer! 🌟** **Experience:** * Consultant: 3–5 years * Senior Consultant: 7+ years **Role Overview** We are looking for skilled DevSecOps Engineers to design, implement, and maintain secure, cloud-native infrastructure on AWS. The ideal candidates should have strong experience in cloud infrastructure, containerisation, Infrastructure as Code (IaC), CI/CD automation, and cloud security. 🔹 Key Responsibilities * Design, build, and maintain AWS cloud infrastructure across development, staging, and production environments. * Implement Infrastructure as Code (IaC) using Terraform or equivalent tools. * Manage containerised environments using Docker and Kubernetes (EKS/ECS). * Integrate security scanning tools into GitLab CI/CD pipelines. * Implement cloud security practices, including IAM, network security, encryption, secrets management, and system hardening. * Set up monitoring, alerting, and observability solutions. * Support production deployments, troubleshooting, and incident resolution. * Implement backup, recovery, and disaster recovery procedures. * Integrate infrastructure with identity and access management solutions. * Maintain technical documentation and operational runbooks. 🔹 Additional Responsibilities – Senior Consultant * Define secure cloud infrastructure architecture and security baselines. * Establish security standards, governance, and best practices. * Guide and mentor engineering teams on DevSecOps practices. * Work with security teams on compliance reviews and remediation activities. 🔹 Mandatory Technical Skills * **AWS:** Hands-on cloud infrastructure setup and management. * **Infrastructure as Code:** Terraform or equivalent. * **Containers:** Docker and Kubernetes (EKS). * **CI/CD:** Pipeline design, implementation, and maintenance. * **Cloud Security:** IAM, encryption, network security, and infrastructure hardening. * **Security Scanning:** SAST, dependency, secrets, container image, and IaC scanning tools. * **Observability:** Experience with at least one monitoring and observability tool. * **Production Operations:** Deployment support, troubleshooting, and incident management. 🔹 Good-to-Have Skills * Dynatrace or Datadog. * GitLab CI/CD. * ADFS, Active Directory, SAML, OIDC, and identity management. * Trend Micro security tools. * Golang, Kotlin, Next.js, and TypeScript. * Temporal workflow engine. * OutSystems, Oracle Policy Automation (OPA/OIA), and Sitefinity. * Singapore Government or public sector project experience. 🔹 Soft Skills * Strong security-first mindset. * Good problem-solving and troubleshooting skills. * Clear communication and documentation skills. * Ability to work collaboratively with development, infrastructure, and security teams. * Senior Consultant: Strong technical leadership, mentoring, and stakeholder management skills. **📩 Interested candidates can share their updated resumes.**