DevOps Engineer

Location: Singapore, Singapore

Thales people architect solutions at the heart of the defence-security continuum. Interoperable and secure information and telecommunications systems for defence, security, and civil operators, are based upon innovative use of radiocommunications, networks, and cybersecurity. We are ground breaking new digital technologies such as 4G mobile communications, cryptography, cloud computing and big data for use in physical protection systems, and critical information systems.

Thales established its presence in Singapore in 1973 to support the expansion of aerospace-related activities in the Asia-Pacific region. Throughout the last four decades, the company grew from strength to strength and is today involved in the primary businesses of Aerospace (including Air Traffic Management), Defence & Security, Ground Transportation and Digital Identity & Security. Thales today employs over 2,100 people in Singapore across all its business areas.

**Roles & Responsibilities**:

- Maintain and even improve the means so that products are correctly and continuously integrated and deployed in quality assurance, UAT, production and DR environments, respecting established rules.

Secure the product operability
- Understand the functional context of the product up to the point of challenging functional decisions.
- Evaluate the system continuously and objectively so that the product with underlying architecture is state of the art.
- Ensure that operational best practices (supervision/monitoring, backups, archives, log management) are implemented.
- Ensure the SLAs are met even during deployment of new versions and hotfixes
- Ensure the software team is informed and aware of operational constraints.

**Essential Skills & Qualifications**:
System skillset:

- System Administration basics (services, ssh, OS packages management, etc)

DevOps tooling advanced skillset:

- Extensive working experience (at least 3 years) with Containerization and Kubernetes On-Prem (Not Cloud Based Kubernetes Service)
- Use of ArgoCD and Helm
- Developing and maintaining Ansible Playbooks
- Scripting experience in Shell, Bash, CMD and Powershell
- Using Jira and Gitlab

Infrastructure as code skillset:

- Automated configuration using Ansible

Network basics:

- Good working experience with NGINX and HAproxy deployment and configuration
- Familiar with commonly used network commands (e.g. curl, telnet, netstat)
- LAN architecture (CIDR, vLAN, routing, NAT)
- DNS and SSL (internal, external)
- Understand Network ACLs and request firewall access as required

Security:

- Secrets management using various vaults (Kubernetes secrets, Hashicorp Vault, etc)
- TLS and mTLS implementation with SSL in and out of Kubernetes
- SSH administration
- Basic understanding on encryption at rest and implementations

**Good-to-have Skills**:

- System Administration advanced skillset (IPtables, systemd modifications, advanced kernel tuning, etc)
- Experience with different options of hypervisors (VMware, HyperV)
- Experience with Kubernetes Service Mesh (linkerd, istio)

Build for the Run:

- Deploy and administrate monitoring and alerting tooling (grafana, prometheus)
- Craft monitoring and alerting thresholds
- Deploy and administrate a log concentration tool (ELK and Filebeat)
- Kafka cluster configuration for maintenance and performance
- Create custom searches and dashboards on Kibana

Other useful skills:

- General technical architecture methodology understanding (RPO, RTO, SLA, flow matrix,...)
- SQL and NoSQL Database administration basics (ex : Database dump, clustering models, deployment architecture)
- Agile methodology and process understanding and experience
- Development skill with one of the following language: Java,.Net

**Behaviour**:

- Produces Ingenious, astute design, with an open mind
- Excellent communication verbally and written, presentation and interpersonal skills to work with local and overseas project teams, and external stakeholders.
- Collaborative team player is a must