Job description:

Overview
The Technology Division at BCS is responsible for the operations, maintenance, and support of BCS applications such as FAST, Giro, CTS, PayNow, SGQR, TFR, eGIRO and its critical infrastructure, ensuring its operational stability, regulatory compliance, and service reliability.

The IT Operations department is regarded as BCS's backbone, overseeing the day-to-day operations, maintenance, and support of IT systems and infrastructure that ensure the continuous delivery of BCS applications. This includes the management of data center operations, application monitoring and Level incident management support, ensuring the systems are always available, secure, and compliant.

Automation and DevSecOps Engineer role
We are seeking an experience and hands-on DevSecOps & Automation Engineer to design, build, and operate secure, scalable, and automated software delivery pipelines and platform operations.

The ideal candidate possesses strong technical expertise, is proactive, and is passionate about engineering excellence. You will work closely with platform, operations, application, and cross-functional teams to design and deliver automation solutions that enhance efficiency, reliability, and security across the organization. This role encompasses both BAU operations and project-based initiatives, requiring the ability to balance operational support with continuous improvement and delivery.

This role also embraces AI-driven innovation, including the use of LLMs, intelligent automation, and agentic AI, to improve operational efficiency, reduce operational toil, strengthen security posture, and enable scalable, self-service platforms.

Key Responsibilities
DevSecOps Engineering (CI/CD, Tools & Practices)
• Strong understanding of DevSecOps principles.
• Design, build, and maintain end to end CI/CD pipelines for application and platform deployments.
• Strong hands on experience with CI/CD tooling such as Jenkins, Redhat Ansible, Octopus, AWS CodePipeline, and source control platforms including Bitbucket or AWS CodeCommit.
• Automate build, test, security scanning, packaging, and deployment workflows across multiple environments.
• Develop and maintain reusable pipeline templates and automation frameworks to standardize delivery practices.
• Continuously improve delivery speed, reliability, quality, and developer experience through automation and best practices.
• Hands on experience with Red Hat Ansible for configuration management, provisioning, and automation.
• Manage artifacts, binaries, and dependencies using repositories such as JFrog Artifactory and Sonatype Nexus Repository.
• Strong understanding of artifact lifecycle management, dependency control, and versioning best practices.
• Embed security and quality controls into CI/CD pipelines, including:
o Static Application Security Testing (SAST) using tools such as Fortify.
o Code quality and secrets scanning using SonarQube.
o Software Composition Analysis (SCA), 3rd party / OSS libraries using Sonatype Nexus.
• Collaborate closely with Security, Risk, and Compliance, application teams to meet security standards and regulatory requirements.
• Automate security validations, policy enforcement, guardrails, and audit evidence collection across pipelines and cloud environments.
• Support audit, risk, and compliance activities through repeatable and automated controls.
________________________________________
Cloud & Platform Engineering (AWS)
• Build and operate cloud native CI/CD pipeline and automation workflows/solution on AWS.
• Hands-on experience in Terraform to build for provisioning, managing and automating cloud infrastructure using Infrastructure as Code (IaC) best practices.
• Design solution using multiple AWS services including:
o EC2, ECS/EKS, Lambda, IAM, VPC, ALB/NLB, S3, RDS, CodePipeline, CodeBuild, AWS Inspector, CloudWatch, Glue, etc.
• Design secure, scalable, and resilient cloud architectures aligned with operational and compliance requirements.
• Implement cloud automation for provisioning, configuration, scaling, and lifecycle management.
________________________________________
Automation, Reliability & Operational Excellence
• Design automation with reliability, security, and scalability in mind (idempotency, error handling, retries, rollback).
• Automate manual operational tasks to reduce toil and improve system reliability.
• Implement logging, monitoring, and alerting for automation to ensure visibility and maintainability.
• Apply Infrastructure / Operations automation principles (e.g. configuration-driven automation, version control, code reviews).
• Work together with various team to identify automation opportunities.
• Proficiency in automation and scripting, particularly using Python and Unix shell scripting.
________________________________________
AI Driven & Future Capabilities
• Drive adoption of AI across teams by identifying practical use cases and integrating AI capabilities into everyday workflows to improve productivity, quality and operational efficiency by leveraging AI Assisted tools.
• Identify, prototype, and scale AI driven solutions that streamline workflows, reduce manual effort, and accelerate delivery.
• Work with multiple teams to promote effective, responsible, and secure usage of AI technologies.
________________________________________
General
• Collaborate with various team, eg. application, infrastructure, security, operations, product, IT Service Management team, IT Governance, Risk & Compliance, or Auditor.
• Some experiences in handling audit and risk activities from MAS, Group audit, Risk & Compliance, and 3rd party auditor.
• Prepare and update Automation and DevSecOps documentations, knowledgebase, SOP, best practices as required.
• Able to mentor automation / devsecops engineer peers as required.
• Comfortable liaising with vendor to discuss on the requirements, solutioning and validating the implementation.

Requirements
Education
Bachelor's degree in information technology, Computer Science, or a related field.

Experiences
At least 7 years of hands-on experience in the following:
Technical Skills
1. Solid understanding of Automation and DevSecOps principles.
2. Strong hands on experience with CI/CD tools (Bitbucket, Jenkins, Ansible, Octopus, JFrog, Sonatype Nexus, Sonatype Sonarqube, Fortify, AWS Cloudcommit, AWS Codepipeline).
3. Experience in refining DevSecOps overall flow for seamless CI/CD pipeline with CI/CD tools.
4. Strong experience working in AWS cloud environments.
5. Scripting and automation skills using Python, Unix Shell Scripting, or others.
6. Ability to design scalable, reusable, resilience and secure automation solutions.
7. Good understanding or hands on experience with Kubernetes or microservices containerization.
8. Strong troubleshooting skills and ability to translate operational pain points into automation or AI use cases.
9. Experience with Elasticsearch, including designing and building Kibana dashboards to enable monitoring and actionable operational insights will be an advantage.

Personal Attributes
1. Strong communication and stakeholder engagement skills, with the ability to translate complex requirement into a working solution.
2. Strong sense of ownership and accountability, with a high level of commitment to delivery, quality, and outcomes.
3. Proactive, self motivated, and growth oriented, with a passion for continuous improvement and innovation.
4. Demonstrated analytical and problem solving skills, with the ability to identify issues, assess impact, and drive resolution.
5. Excellent follow up and follow through, ensuring end to end execution and adherence to committed timelines.
6. Able to work effectively independently and within cross functional teams in fast paced environments.
7. Collaborative team player with strong interpersonal skills and a focus on building trusted working relationships.
8. Open mindset with willingness to learn new skills and apply them to improve team productivity and outcomes.
9. Able to drive project end to end with minimum supervision.
10. Ability to document automation workflows, runbooks, and usage guides.

Certifications would be a plus:
1. AWS Certified DevOps Engineer
2. Certified Professional in Python Programming
3. Red Hat Enterprise Linux Automation With Ansible
4. AI Agentic Certification

Senior Automation and DevSecOps Engineer