Automation and DevSecOps Engineer 1
Hands-on DevSecOps engineer at NETS' subsidiary BCS in Singapore who designs, builds, and operates secure CI/CD pipelines and automated platform operations for national payment clearing systems (FAST, GIRO, PayNow, SGQR). Core stack includes AWS, Terraform, Jenkins, Ansible, Python, and security tooling, with a push toward AI-driven automation.
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Information Technology, Information Systems, Computer Science, or a related field
- Minimum 3 years of relevant experience in DevSecOps, automation, or a related role
- Good understanding of automation and DevSecOps principles
- Hands-on experience with CI/CD tools (Bitbucket, Jenkins, Ansible, JFrog, Sonatype Nexus, SonarQube, Fortify, AWS CodeCommit, AWS CodePipeline)
- Experience refining DevSecOps overall flow for seamless CI/CD pipelines
- Familiar with AWS cloud environments
- Experience with Terraform for Infrastructure as Code
- Scripting and automation skills using Python and Unix shell scripting
- Ability to design scalable, reusable, resilient, and secure automation solutions
- Good understanding or hands-on experience with Kubernetes or microservices containerization
- Strong troubleshooting skills and ability to translate operational pain points into automation
- Strong communication and stakeholder engagement skills
- Analytical and problem-solving skills with end-to-end follow-through
- Able to work independently in a fast-paced environment and collaborate as a team player
Nice to have
- AWS Certified DevOps Engineer
- Certified Professional in Python Programming
- Red Hat Enterprise Linux Automation with Ansible
Full description
BCS is NETS’ wholly owned subsidiary, and is an entity within the NETS Group. It manages and operates clearing and payment infrastructure for the Singapore Automated Clearing House, including Fast And Secure Transfers (FAST), Inter-bank GIRO (IBG), Cheque Truncation System (CTS), and provides services for PayNow and SGQR Central Repository.
Team and Position Summary
The Technology Division at BCS is responsible for the operations, maintenance, and support of BCS applications such as FAST, Giro, CTS, PayNow, SGQR, TFR, eGIRO and its critical infrastructure, ensuring its operational stability, regulatory compliance, and service reliability.
We are seeking an experience and hands-on Automation and DevSecOps Engineer to design, build, and operate secure, scalable, and automated software delivery pipelines and platform operations.
The incumbent will work closely with platform, operations, application, and cross-functional teams to design and deliver automation solutions that enhance efficiency, reliability, and security across the organization. This role encompasses both BAU operations and project-based initiatives, requiring the ability to balance operational support with continuous improvement and delivery.
This role also embraces AI-driven innovation, including the use of LLMs, intelligent automation, and agentic AI, to improve operational efficiency, reduce operational toil, strengthen security posture, and enable scalable, self-service platforms.
Key ResponsibilitiesDevSecOps Engineering (CI/CD, Tools & Practices)
- Good understanding of DevSecOps principles.
- Design, build, and maintain end‑to‑end CI/CD pipelines for application deployments.
- Hands‑on experience with CI/CD tooling such as Jira, Jenkins, Bitbucket, Ansible, AWS Code Pipeline, AWS CodeCommit.
- Automate build, test, security scanning, packaging, and deployment workflows across multiple environments.
- Develop and maintain reusable pipeline templates and automation frameworks to standardize delivery practices.
- Continuously improve delivery speed, reliability, quality, and developer experience through automation and best practices.
- Manage artifacts, binaries, and dependencies using repositories such as JFrog Artifactory and Sonatype Nexus Repository.
- Good understanding of artifact lifecycle management, dependency control, and versioning best practices.
- Embed security and quality controls into CI/CD pipelines, including:
- Static Application Security Testing (SAST) using tools such as Fortify.
- Code quality and secrets scanning using SonarQube.