Employment Opportunity - DevSecOps Engineer

Develop and maintain CI/CD pipelines using SHIP-HATS toolsecosystem Configure GitLab for version control and automateddeployment workflows Implement code quality gates using SonarQube for static code analysis Manage security scanning using Fortify on Demand (FOD) for vulnerability assessment Oversee dependency scanning and management using Nexus IQ Coordinate with Cloud SCAPE for security compliance scanning and remediation

Security and Compliance:

• Implement and maintain Automated Baseline Log Review (ABLR)systems
• Coordinate with GovTech Cyber Security Operations Centre(GCSOC) for security monitoring
• Manage Central Accounts Management (CAM) integration for user access control
• Coordinate and resolve Vulnerability Assessment and Penetration Testing (VAPT) findings.
• Ensure compliance with Personal Data Protection Impact Assessment (PDPIA) requirements
• Implement and maintain Vulnerability Management System (VMS)

Platform Operations:

• Monitor system performance and implement optimization strategies
• Manage secrets and encryption key rotation for data protection
• Configure email notifications for data processing status and error alerts
• Implement and maintain data retention policies
• Support SaaS whitelisting processes and approvals
• Coordinate System Security Acceptance Testing (SSAT)activities

Collaboration and Support:

• Work closely with Data Engineers, Data Analysts and security technical team.
• Support multiple data marts
• Provide technical guidance for Raw-to-Tech and Tech-to-Business data pipelines
• Collaborate with various government divisions and stakeholders
• Support training environment setup for user onboarding and skill development