Thales

DevSecOps Engineer

Thales
Aerospace & DefenseSingaporeOnsitePosted 4 weeks ago

About the role

AI summarised

Join Thales in building the next generation of Air Traffic Management Systems as a DevSecOps Engineer. You will play a central role in enabling Continuous Delivery and automation using the CLAMR approach to DevOps, integrating robust cybersecurity practices into CI/CD workflows across cloud and on-premises infrastructure.

Aerospace & DefenseOnsite

Key Responsibilities

  • Build and maintain CI/CD pipelines that support Agile teams and ARTs.
  • Provision and manage environments (development, test, staging, production).
  • Ensure high availability and resilience in cloud and on-prem environments using strategies like blue/green and canary release.
  • Manage the automation and toolchain integration for code quality, security scanning, release management, and monitoring.
  • Provide DevOps coaching to teams on version control, branching strategies, and automated testing adoption.
  • Develop security practices (e.g., Secrets Management) into CI pipelines to enforce 'shift-left' security.
  • Automate compliance checks and enforce policies such as code signing and container scanning.
  • Develop systems observability practices (monitoring, logs, traces) to track key metrics like deployment frequency and MTTR.
  • Collaborate with InfoSec and Compliance teams on security audits, risk assessments, and data assessments.

Requirements

  • Bachelors in Computer Science or Information Technology or a recognized Engineering degree.
  • Strong expertise in Linux Operating System internals (Process Sub-systems, FileSystem).
  • Strong expertise in Linux shell scripting (Bash scripting).
  • Expertise in designing and deploying secure OCI containerized workloads (Docker, Kaniko) on Kubernetes.
  • Strong expertise in designing and deploying Continuous Integration Pipelines for Software Development Teams.
  • Expertise in Container Orchestration Frameworks, specifically Kubernetes, including Secrets and Configuration Management.
  • Strong expertise in designing proactive monitoring for production-grade environments and incident response.
  • Demonstrated ownership of the DevSecOps Mindset and guiding development teams in its adoption.
  • Demonstrated experience working in a multi-cultural and multi-disciplinary environment.