Design and manage GitLab CI/CD pipelines, automate DevSecOps tooling (SCA, container scanning), and secure/optimize AWS infrastructure. Conduct vulnerability assessments, monitor/respond to incidents, collaborate with teams to embed security across the SDLC, and stay current with security trends.
Role and Responsibilities:
- Design, implement, and manage CI/CD pipelines using GitLab to support continuous integration, delivery, and deployment.
- Develop and maintain automated scripts and tools to enhance DevSecOps processes including SCA (Software Composition Analysis) and container scanning.
- Manage and optimize AWS services including ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, and NLB to ensure secure and efficient cloud infrastructure.
- Implement security best practices in cloud environments, focusing on identity management, logging, monitoring, and incident response.
- Collaborate with development and operations teams to promote a security-first mindset and embed security practices throughout the software development lifecycle.
- Conduct regular security assessments, vulnerability scans, and penetration tests to identify and remediate security weaknesses.
- Monitor and respond to security incidents and anomalies in real-time, providing analysis and recommendations for corrective actions.
- Stay up-to-date with the latest security trends, vulnerabilities, and technologies to ensure robust defenses against potential threats.
- Good to Have: Knowledge in MS Entra, MS Graph API, Node.js, MongoDB, and AWS Lambda (Python Serverless).
Requirements
Qualifications:
- Education: Information Technology, or a related field.
- Experience:
- Min 4 years of proven experience in DevSecOps and/or Cloud Services management and deployment, with a strong focus on AWS and/or Azure services.
- Hands-on experience with GitLab CI/CD pipelines.
- Experience with security tools and practices including SCA, container scanning, and penetration testing.
- Good to Have: Experience with GCC-2.0.
- Skills:
- Proficiency in managing AWS services (ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, NLB).
- Strong scripting skills (Python, Bash, etc.) for automation.
- Familiarity with containerization technologies (Docker, Kubernetes).
- Excellent understanding of security principles and best practices.
- Strong problem-solving skills and attention to detail.
- Excellent communication and teamwork skills.
Preferred Qualifications:
- Certifications:
- Required: Associate-level AWS certifications (e.g., AWS Certified SysOps Administrator, AWS Certified Developer).
- Good to have: Azure certifications (e.g., SC-300, AZ-104).
- Additional Experience:
- Experience with Infrastructure as Code (IaC) tools such as Terraform or CloudFormation.
- Background in software development with knowledge of secure coding practices.
- Soft Skills:
- Ability to thrive in a fast-paced, agile environment.
- Proven track record of proactive problem-solving and innovation.
Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!
The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".
We thank you for your interest and please note that only shortlisted candidates will be notified.
By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: or such other successor site.
Benefits
- A wholly-owned subsidiary of GovTech.
- Contract Staff enjoys the same benefits as Permanent Employeees
- This is a 2-year direct contract
Assurity Trusted Solutions Pte Ltd Singapore, Singapore, SGP Office
Singapore, Singapore
Similar Jobs
Artificial Intelligence • Fintech • Payments • Business Intelligence • Financial Services • Generative AI
Lead design and implementation of cloud-native IAM and account infrastructure. Define technical strategy, build high-availability backend services in Java/Kotlin, enforce security protocols (OAuth2/OIDC/SAML), optimize scalable infrastructure, mentor engineers, and align roadmaps with Product, Security, and Compliance for global regulatory requirements.
Top Skills:
AWSAzureCassandraDockerGCPGoIdentity And Access Management (Iam)JavaKotlinKubernetesOauth2OidcOwaspPostgresPythonRedisSAML
Artificial Intelligence • Fintech • Payments • Business Intelligence • Financial Services • Generative AI
Build and operate backend services for global liquidity management, safeguarding, investments and cash data. Design scalable microservices, event-driven pipelines, APIs and persistence layers. Ensure correctness, observability, testing, controls, reconciliation and compliance. Collaborate with cross-functional stakeholders, participate in on-call rotation, and deliver end-to-end features from design to production.
Top Skills:
Ci/CdContract TestingEvent-Driven ArchitectureGrpcIntegration TestingJavaJvmKafkaKey-Value StoresKotlinLoggingMetricsMicroservicesNoSQLPostgresRest ApisSQLTracingUnit Testing
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
Lead end-to-end design and technical execution to migrate an Ericsson Dual Mode 5G SA and 4G EPC from 2-site NFVi to a resilient 3-site CNIS. Create HLDs/LLDs, migration and rollback plans, govern Kubernetes/CNF onboarding, CI/CD/GitOps automation, resiliency, observability, and act as the customer-facing technical authority.
Top Skills:
4G Epc (MmeAnsibleArgocdAusfCcdCeeChfCi/CdCnfsDiameterDnsEricsson 5G Sa Core (AmfEricsson CnisGitopsHelmHssHttp2/SbiImsIp NetworkingJenkinsKubernetesLoad BalancingLog AnalyticsMonitoringNetwork SecurityNrfObservabilityOcs)Openstack NfviPcfPcrfPgwScp)SgwSignallingSmfSubscriber Data ManagementTerraformUdmUpf
What you need to know about the Singapore Tech Scene
The digital revolution has driven a constant demand for tech professionals across industries like software development, data analytics and cybersecurity. In Singapore, one of the largest cities in Southeast Asia, the demand for tech talent is so high that the government continues to invest millions into programs designed to develop a talent pipeline directly from universities while also scaling efforts in pre-employment training and mid-career upskilling to expand and elevate its workforce.
