Senior DevSecOps Engineer

Job Description:
Your primary role will be to design, develop and maintain the embedded software continuous integration (CI) and continuous testing pipeline. You will also work collaboratively with embedded software team and security team to integrate security measures throughout the Software Development Life Cycle (SDLC).
The ideal candidate should have deep expertise in security best practices, automation, and cloud platforms, with a focus on integrating security into every stage of the SDLC.

Key Responsibilities:

• Infrastructure Provisioning: Setup and manage CI/CD infrastructure, provision and maintain service accounts, mange tokens and certificates for tools/apps/services. Server Maintenance, backup and recovery planning for infrastructures and services
• CI/CD Pipeline Setup & Maintenance: Design, implement, and maintain the CI/CD pipelines, create common build platform; setup Jenkins server/ build agents
• Configuration Management: Configuration and maintenance of the environment
• Monitoring and Logging: Implement pipeline monitoring, alerting and logging to track capacity limit, memory and CPU usage limit; Define and create CI/CD dashboard to track and monitor embedded software build and performance
• Security Integration: Integrate security practices into the SDLC, including vulnerability scanning, code analysis, and compliance checks
• Automation and Scripting: Develop automation scripts and tools to streamline repetitive tasks, improve efficiency, and reduce manual errors in the software development and deployment processes
• Cloud Security: Implement and enforce security best practices for cloud environments, ensuring robust protection of cloud resources and data
• Documentation: Develop and document standard operating procedures

Qualifications:

• Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, or equivalent
• 7+ years of experience in DevOps with an emphasis on security, preferably prior experience in embedded product development
• Proficiency with DevSecOps tools and technologies such as Jenkins, GitLab, Docker, Kubernetes, Ansible, Terraform, Artifactory
• Excellent knowledge of cloud platforms (AWS, Azure, GCP) and their security configurations.
• Experience in building and maintaining automation playbook using automation technologies such as ansible, python, PowerShell, Chef (ruby) Terraform (HCL), groovy, JavaScript, and other scripting languages
• Hand-on experience in designing, developing and migrating CI/CD pipelines
• Experience in VMware virtualization products such as VMware vSpher, VMware ESXi and VMware vCenter
• Knowledge of security frameworks and standards (e.g., OWASP, NIST, IEC 62443)
• Understanding of network security, data encryption techniques, and secure coding practices
• Problem-solving skills and ability to think creatively to find solutions for complex problems
• Comfortable with Agile methodologies
  

Claudia Kueh Kee Jinq EA License No.: 02C3423 Personnel Registration No.:R1880247

Please note that your response to this advertisement and communications with us pursuant to this advertisement will constitute informed consent to the collection, use and/or disclosure of personal data by ManpowerGroup Singapore for the purpose of carrying out its business, in compliance with the relevant provisions of the Personal Data Protection Act 2012. To learn more about ManpowerGroup's Global Privacy Policy, please visit https://www.manpower.com.sg/privacy-notice.