Apply Job

DevSecOps Engineer (Amazon API Gateway)

Persol Singapore Pte Ltd

Role Description

• Configure and utilize approved CI/CD pipelines and deployment processes provided by the MCC platform team
• Work with software development teams to onboard applications onto the MCC platform
• Collaborate with solution architects, platform teams, cybersecurity stakeholders, and software development teams to resolve deployment, security, compliance, and operational issues
• Configure, deploy, and maintain cloud monitoring, logging, and alerting solutions.
• Monitor cloud infrastructure and applications to ensure availability, reliability, and operational visibility
• Understand security controls and checks provided by the MCC platform
• Review and interpret security findings generated by platform-provided security controls
• Work closely with software development teams to investigate, prioritise, track, and remediate identified vulnerabilities and compliance issues.
• Provide guidance to software teams on platform security requirements, secure coding practices, and vulnerability remediation approaches
• Develop and maintain deployment documentation, operational procedures, security-related artefacts, and technical records
• Explore, prototype, and develop full stack web applications and platform capabilities for experimentation, proof-of-concept initiatives, and process improvement efforts
• Learn and apply frontend, backend, API, and database technologies to support evolving platform and user requirements

Requirement

• Hands-on experience with AWS cloud services, including Amazon API Gateway, Networking, Compute Services
• Hands-on experience with Amazon API Gateway, including API configuration, deployment, integration, routing, security controls, and troubleshooting
• Demonstrated competency with AWS cloud services. Relevant AWS certifications may be used as evidence of technical competency
• Experience working with CI/CD platforms such as Gitlab, Jenkins, Azure DevOps, or equivalent
• Familiarity with containerization and orchestration technologies such as Docker and Kubernetes
• Experience interpreting and analyzing findings generated by security tools such as SAST, DAST, SCA, container scanning, and compliance scanning solutions, and working closely with software development teams to investigate, track, and remediate identified issues.
• Familiarity with AWS monitoring and observability services such as Amazon CloudWatch, CloudTrail, AWS Config, Amazon Managed Prometheus, Amazon Managed Grafana, or equivalent solutions
• Knowledge of cloud infrastructure concepts, including networking, compute, storage, identity and access management, monitoring, and security controls.
• Experience with scripting languages such as Python, Bash, or PowerShell.
• Ability to work with multiple software development teams to support application onboarding, integration testing, troubleshooting, and operationalization activities

Skills