DevSecOps Engineer

• Design, develop, and maintain secure, scalable and resilient cloud infrastructure and application environments.
  
• Build and enhance CI/CD pipelines to automate software builds, testing, integration, deployment and release processes.
  
• Implement Infrastructure-as-Code (IaC) and automation using tools such as Terraform, Ansible or equivalent technologies.
  
• Deploy, manage and optimise AWS cloud resources, platform services and cloud-native applications.
  
• Work with Docker and Kubernetes to support containerised applications and modern application deployment.
  
• Implement monitoring, logging and observability solutions to improve platform availability, performance, reliability and operational health.
  
• Integrate security throughout the Software Development Lifecycle (SDLC), working closely with developers and engineering teams.
  
• Conduct vulnerability assessments, security reviews, system hardening, threat and risk assessments, and remediation activities.
  
• Troubleshoot and resolve complex system, application, cloud and infrastructure issues, including supporting incident response activities.
  
• Implement and maintain backup, disaster recovery and business continuity measures while collaborating with cross-functional teams to continuously improve platform security and reliability.
  

Requirements

• Strong understanding of SDLC, CI/CD,DevSecOps and Test-Driven Development (TDD) practices.
  
• Hands-on experience designing, deploying and supporting AWS cloud-native applications and infrastructure; experience with GCC or regulated/government environments will be advantageous.
  
• Proficiency in at least two programming or scripting languages, such as Python, Bash, PowerShell, JavaScript or Java.
  
• Practical experience with Terraform/Ansible, Docker, Kubernetes, GitLab and CI/CD platforms, together with monitoring and observability solutions.
  
• Good knowledge of application security,cloud security, secure coding, vulnerability management, system hardening and remediation.
  
• Familiarity with modern cloud-native and security tools such as Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane, HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ and AWS security services will be an advantage.
  

Clarence Khoh
R1552376