DevOps Engineer

Overview
Join to apply for the
DevOps Engineer (DevSecOps)
role at
CrimsonLogic .
Advancing our World. At CrimsonLogic, we put your Career and Well-being first.
Our Employee Value Proposition: Advancing our People. Advancing our World. We are committed to advancing your career through a full spectrum of professional development programs with the support of a strong Total Rewards philosophy that focus on your well-being. We believe that by investing in each and every one of our employees’ professional and personal growth, we can collectively make a positive impact on the world as we strive for greatness together in a nurturing and inclusive workplace.
Role Purpose
As the
DevOps Engineer (DevSecOps) , you will lead and embed security-first practices across CI/CD, cloud infrastructure, and runtime environments.
Responsibilities
DevSecOps / Security Enablement
Embed security controls in CI/CD pipelines (e.g., SAST, DAST, dependency checks, container scans).
Automate enforcement of security policies (e.g., secret detection, SBOM generation, license policy gates).
Collaborate with DOE Lead and CISO to implement compliance controls (NIST, GovTech standards).
Integrate tools like SonarQube, Trivy, Snyk, Checkov, or custom scanners into pipelines.
Maintain infrastructure hardening and secure baseline templates (e.g., CIS benchmarks, AMI/Container baselines).
Co-own audit and logging configurations (e.g., CloudTrail, Security Hub, WAF logs, GuardDuty alerts).
Cloud Infrastructure & CICD Operations
Maintain and improve secure, automated CI/CD pipelines.
Define IaC security validation steps (e.g., Terraform policy-as-code with OPA or Checkov).
Implement backup, DR, and secrets management workflows in alignment with platform guardrails.
Support runtime observability with secure logging and alerting pipelines (e.g., ELK/Opensearch, Prometheus, Grafana).
Day 2 Operations Collaboration
Support vulnerability triage and incident response processes.
Maintain operational runbooks with security context for SRE rotations.
Contribute to secure service rollout (mTLS, ALB/NLB policies, header validations, etc.).
Collaborate to address hardening gaps in Day 2 operations.
Key Job Competencies
Results Oriented
Interpersonal Savvy
Organisational Awareness
Decision Quality
Education Requirements
Bachelor’s degree
in Computer Science, Information Technology, Software Engineering, or a related field is
required .
Working Experience Requirements
4–6 years of combined DevOps/Security Engineering experience.
Skills Required
Hands-on experience in securing AWS cloud infrastructure (IAM, KMS, GuardDuty, WAF).
Hands-on experience in commercial security tools (Next GEN Firewalls, Database Activity Monitoring).
Proven experience integrating security checks into GitOps / CI pipelines (e.g., GitLab CI, GitHub Actions, Jenkins).
Solid experience with container security: Docker image scanning, Kubernetes RBAC, admission controllers.
Proficiency in scripting (Bash, Python, or similar) for automation.
Familiarity with compliance requirements: NIST 800‐53, CIS benchmarks.
Strong diagnostic skills, especially in cloud networking, TLS configurations, and log analysis.
Experience with IaC (Terraform/Helm), GitOps, and configuration management.
Bonus: Experience conducting or responding to security audits or VAPT findings.
CrimsonLogic is proud to be an equal opportunity employer. We hire talented and passionate people of all backgrounds and create an inclusive workplace for all employees to develop and build their career with us.
Seniority level
Mid-Senior level
Employment type
Contract
Job function
Engineering and Information Technology
Industries
IT Services and IT Consulting
Referrals increase your chances of interviewing at CrimsonLogic by 2x
Get notified about new DevOps Engineer jobs in
Singapore, Singapore .
Information Technology - Cloud/DevOps Engineer
Downtown Core, Central Singapore Community Development Council, Singapore
#J-18808-Ljbffr