DevSecOps Engineer - #1659

Responsibilities

• Design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS, including runners, branching/merge controls and access management.

• Integrate Fortify, Nexus IQ and SonarQube into CI/CD pipelines and implement appropriate security and quality gates.

• Apply shift-left security practices across the SDLC, covering code, dependencies, containers and application deployments.

• Automate application build, testing, security scanning and deployment across development and production environments.

• Support containerised application deployment using Docker and Kubernetes/EKS.

• Manage pipeline credentials, secrets and service accounts securely.

• Develop reusable pipeline templates and standardise DevSecOps practices across AE applications.

• Troubleshoot pipeline, security scanning and deployment issues and support developers in resolving identified findings.

Experience and Skills Needed

• Degree or Diploma in Computer Science, Information Technology, Software/Computer Engineering or related discipline.

• Hands-on experience with GitLab CI/CD, including pipeline configuration and GitLab Runners.

• Good understanding of SDLC, DevSecOps and shift-left security, including SAST, DAST, Software Composition Analysis (SCA) and security gates.

• Experience integrating application security and code-quality tools, preferably Fortify, Nexus IQ and SonarQube, into CI/CD pipelines.

• Experience with Git, Docker and Kubernetes, with working knowledge of AWS/EKS environments.

• Scripting experience using Python, Bash, PowerShell or equivalent.

• Working knowledge of Linux, networking, access control and secrets management.

• Strong troubleshooting skills across CI/CD, security tooling and application deployment.

Added Advantage

• Hands-on experience with SHIP-HATS, particularly CI/CD and DevSecOps implementation.

• Experience with Infrastructure as Code using Terraform, Ansible or AWS CloudFormation.

• Experience with Helm, Argo CD or similar Kubernetes deployment/GitOps tools.

• Knowledge of SBOM and software supply-chain security.

• Experience with DevSecOps implementation in Singapore Government or regulated environments.