The World’s Leading Blockchain Ecosystem and Digital Asset Exchange
DevSecOps Engineer
Location
Singapore
Posted
5 days ago
Salary
0
Seniority
Senior
Job Description
DevSecOps Engineer
Binance
• Design and deploy security solutions to monitor, harden entire infra system in AWS • Implement new, and update existing security measures for the protection of Binance.com infrastructure • Utilize log ingestion platform for security analytics and identification of tactics, techniques and patterns of attackers • Provides solutions to audited access, risk assessments in permission escalation, and vulnerability assessments • Build models or leverage LLM for anomaly detection
Job Requirements
- A strong background with AWS or other cloud technologies
- Deep expertise with GNU/Linux systems
- Previous development experience, preferably in Python, node.js or Go
- Familiarity with cloud-native security tools and practices, such as IAM, Secrets management, runtime protection, and network segmentation
- Experience with logging systems and log analysis
- Strong problem-solving and analytical skills
- Extensive experience with Terraform and Teleport.
- Experience with containerization technologies, such as Docker and Kubernetes.
- Experience with infrastructure vulnerability scanning, vulnerability management and patching practices
- Fluent in both English and Mandarin
Benefits
- Competitive salary and company benefits
- Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)
Related Guides
Related Categories
Related Job Pages
More DevOps Engineer Jobs
DevOps Engineer
Texas State Library and Archives CommisionProficiency with creating CI/CD pipelines and stages with Harness using YAML templates. Kong plugin development using Lua or Go. Experience with Package Managers like LuaRocks. Experience with containerization (Docker), and orchestration tools (Kubernetes). Experience with cloud platforms such as AWS, Google Cloud, or Azure. Familiarity with monitoring and logging tools like Datadog and OpenTelemetry.
Role Description To ensure successful initiation, planning, execution, control and completion of the project by guiding team members on technical aspects, conducting reviews of technical documents and artefacts. - Lead project development, production support and maintenance activities. - Fill and ensure timesheets are completed, as is the invoicing process, on or before the deadline. - Lead the customer interface for the project on an everyday basis, proactively addressing any issues before they are escalated. - Create functional and technical specification documents. - Track open tickets/incidents in queue and allocate tickets to resources and ensure that the tickets are closed within the deadlines. - Ensure analysts adhere to SLA/KPI/OLA. - Ensure that all in the delivery team, including self, are constantly thinking of ways to do things faster, better or in a more economic manner. - Lead and ensure project is in compliance with Software Quality Processes and within timelines. - Review functional and technical specification documents. - Serve as the single point of contact for the team to the project stakeholders. - Promote teamwork, motivate, mentor and develop subordinates. - Provide application production support as per process/RACI (Responsible, Accountable, Consulted and Informed) Matrix. Company Description
DevOps Engineer
hireVouchhireVouch is a premier recruitment and digital transformation solutions company dedicated to helping organizations find and retain top-tier talent. With a focus on hiring the right
Role Description This is a remote position. Our client is an upstart proprietary trading fund operating under the umbrella of a global titan. You can enjoy the dynamic energy of a start-up with the assured job security that comes with a mature well-established global operator. Your day-to-day responsibilities include: - Implement DevOps infrastructure projects - Design and implement secure automation solutions for development, testing, and production environments - Design, develop and scale infrastructure-as-code - Build and deploy automation, monitoring, and analysis solutions - Manage our continuous integration and delivery pipeline to maximize efficiency - Implement industry best practices for system hardening and configuration management - Secure, scale, and manage Linux virtual environments - Develop and maintain solutions for operational administration, system/data backup, disaster recovery, and security/performance monitoring - Continuously evaluate existing systems with industry standards, and make recommendations for improvement - Deploy and maintain critical applications on cloud-native microservices architecture - Implement automation, effective monitoring, and infrastructure-as-code - Deploy and maintain CI/CD pipelines across multiple environments - Support and work alongside a cross-functional engineering team on the latest technologies - Iterate on best practices to increase the quality and velocity of deployments - Sustain and improve the process of knowledge sharing throughout the engineering team - Maintain infrastructure as a Service (IaaS) using infrastructure as code frameworks such as Terraform, AWS SDK, and CloudFormation - Build ETL/ELT solutions for large scale data pipelines within AWS Cloud - Deploy Kubernetes platform in AWS EKS (Managed Kubernetes Services) and assist the Product Team in solution design, configuring Helm charts, migrating environments variables and secrets from non-AWS sources Qualifications - Experience maintaining and deploying highly available, fault-tolerant systems at scale - A drive towards automating repetitive tasks (i.e.: scripting with Python, etc.) - Proficiency in scripting languages including Python - Practical experience with Docker containerization and clustering (e.g., Kubernetes/ECS) - Expertise with AWS - Version control system experience (i.e.: Git) - Experience with infrastructure-as-code (i.e.: Terraform, CloudFormation) - Ability to drive to goals and milestones while valuing and maintaining a strong attention to detail - Excellent judgment, analytical thinking, and problem-solving skills - Full understanding of software development lifecycle best practices - Understanding of monitoring tools (i.e.: CloudWatch, Datadog, etc.) - Strong understanding of micro-services and related architectures - Knowledge of containerization technologies such as Docker and Kubernetes - Ability to work in a fast-paced and constantly changing environment - Strong interpersonal skills and the ability to build and maintain professional, friendly, and cordial relationships with team members, other departments, and external partners - Prior experience in the cryptocurrency industry is considered an asset Benefits - Incredible benefits. Truly. Let's talk about them. You will not be disappointed. - This team has an 18 year wake of incredible global success, and many enriched (professionally, financially, and personally) team members. - Full remote (preference for the Americas between the EST & PST zones).
Role Description - Design and manage multi-account AWS infrastructure (VPC, Route Tables, EC2, ECS, EKS 1.33, RDS, DynamoDB, Elasticache, S3, Transit Gateway, Resource Access Manager, Lambda, CloudFormation, AWS Backup) - Configure load balancing and traffic management (ELB, NLB, Target Groups with gRPC, Route53, Global Accelerator, CloudFront) - Implement security and compliance controls (IAM, IAM Identity Center, SCP, Guard Duty, WAF, CloudTrail, ACM, Secrets Manager, OKTA integration) - Manage Cloudflare infrastructure (Zero Trust, Argo Smart Routing, DNS, Workers, Load Balancer, Bot Management, WAF, Rules & Policies, Cache) - Manage S3 with Access Policies, Lifecycle Policies, S3 Storage Lens optimization, and cross-region replication - Operate messaging and notification services (SNS, SES, SQS) - Architect and manage multi-cluster EKS environments with HA and cross-region DR scenarios using Istio service mesh, Network Policies, Karpenter, HPA, KEDA, Argo CD, Argo Rollouts - Implement and maintain Argo CD for multi-cluster application management with HA and cross-region DR configurations - Configure Argo CD Application Sets for managing applications across multiple EKS clusters - Implement ECR with global cross-region replication for container image distribution and disaster recovery - Implement Aurora Global Database for cross-region DR, manage Aurora RDS (MySQL and PostgreSQL) and standalone MySQL/PostgreSQL instances for development - Design and maintain RDS cross-region replication, automated backups, failover strategies, and upgrade procedures - Establish and maintain DevOps practices including change management, release management, and deployment strategies - Build resilient CI/CD pipelines with cross-region artifact replication, automated testing, and failover capabilities - Develop and maintain GitHub Actions shared internal workflows and reusable actions for standardized deployments - Implement change approval workflows, deployment gates, and release coordination processes - Implement Crossplane for automated feature environment creation, upgrades, and AWS resource provisioning - Deploy applications using Helm, Customize with Overlay Patches, Jsonnet, and Crossplane for infrastructure orchestration - Maintain platform operators (External DNS, External Secrets, Reloader) and custom CRDs - Build comprehensive observability stack & Dashboards (Grafana, Thanos/Prometheus, Loki, Alert manager, Open Telemetry Alloy/Tempo/Beyla/Pyro scope) - Configure exporters (Blackbox, MySQL, Redis, YACE CloudWatch, Cloudflare, Node Exporter, Prometheus Push Gateway) - Support data platforms (Kafka/Kafka UI, Minion, Airflow, JupyterHub, DASK, Superset, Imply, AWS Glue, Athena, Quick Sight, Bedrock) - Optimize CI/CD with GitHub Actions, Actions Runner Controller (ARC), runs-on.com, GitHub Rulesets - Manage mobile app delivery pipelines (Unity Build Management, Fastlane, Google Play Developer, Apple Developer/Enterprise, Applivery) - Implement and maintain all infrastructure using Terraform/Open Tofu with Scalr, backporting existing resources into code - Automate operational tasks wherever possible; create comprehensive runbooks for non-automatable procedures - Conduct thorough post-mortem analysis after incidents, documenting learnings and implementing preventive measures - Drive cost optimization initiatives using S3 Storage Lens, CloudWatch metrics, rightsizing recommendations, and resource lifecycle management - Develop automation in Bash, Python, Go, C#/.NET (Unity Game Engine) - Maintain developer experience (Backstage, Click Up, Miro, Shared GitHub Action/Workflows) - Integrate monitoring and alerting (PagerDuty, Cronitor, Wiz, CloudWatch) Qualifications - Multi-account AWS architecture with Transit Gateway, Resource Access Manager, VPC design, and Route Tables - Kubernetes/EKS high availability with cross-region disaster recovery scenarios - Multi-cluster EKS management with service mesh (Istio), autoscaling (Karpenter, KEDA), GitOps (Argo CD) - Argo CD enterprise deployment for multi-cluster application management with HA and cross-region DR - Argo CD Application Sets, app-of-apps patterns with Helm, and cluster management strategies - ECR global cross-region replication strategies for container image distribution and DR - Cloudflare enterprise features (Zero Trust, Argo Smart Routing, DNS management, Workers, Load Balancer, Bot Management, Cache optimization, WAF Rules & Other Security Policies) - Aurora Global Database implementation and management for cross-region DR - Aurora RDS (MySQL and PostgreSQL engines) and standalone MySQL/PostgreSQL instance management - RDS cross-region replication, automated failover, disaster recovery, and version upgrade strategies - DevOps best practices including change management, release management, and deployment coordination - Resilient CI/CD pipelines with automated testing, cross-region artifact distribution, and failover - GitHub Actions shared workflows and reusable actions development for internal use - Crossplane for Kubernetes-native infrastructure provisioning, feature environment automation, and upgrade orchestration - Expert-level Terraform/Open Tofu with enterprise policy management (Scalr) - Infrastructure backporting and migration from ClickOps to IaC - Complete observability stack (Prometheus, Grafana, Loki, Open Telemetry, distributed tracing) - Data pipeline orchestration (Kafka, Airflow) and analytics platforms (Superset, Imply) - GitHub Actions with self-hosted runners (ARC, runs-on.com) - Proficiency in Python, Bash, Go, and C#/.NET for automation development - Security implementations (IAM, SCP, OKTA, WAF, Guard Duty, Wiz) - Mobile CI/CD (Unity, Fastlane, Apple/Google distribution & Applivery during Development) - Disaster recovery planning, testing, and automation (AWS Backup, cross-region strategies) - AI/ML infrastructure experience (AWS Bedrock) - Cost optimization strategies and Quick Sight for AWS Cost Review - Post-mortem facilitation and blameless incident analysis - Runbook creation and maintenance for operational procedures Technical Skills - Container orchestration with advanced networking and progressive delivery - Infrastructure as Code and GitOps methodologies with automation-first mindset - Change management workflows, approval gates, and release orchestration - CI/CD pipeline design with automated testing, security scanning, and deployment strategies - Incident response, on-call management, post-mortem analysis, DR execution - Crossplane composition design and custom resource definitions - Custom CRD and operator development in Kubernetes - Event-driven architecture (Lambda, SQS, SNS, SES) - Real-time analytics and BI platforms - Developer portal management (Backstage) - Multi-region failover automation and orchestration - Cost analysis and optimization using native AWS tools - Automation of repetitive operational tasks - Technical documentation and runbook authoring - Database performance tuning and optimization (Aurora, MySQL, PostgreSQL) - Argo CD backup, restore, and disaster recovery procedures - Cloudflare Workers development & deployment using Wrangler Soft Skills - Strong troubleshooting - Cross-functional communication - Self-directed - Documentation-focused - Cost-conscious - Continuous improvement mindset
Role Description Architect, design, and implement web-based applications that require maintenance and transformation for various systems. - Work actively with application development teams to coordinate and optimize the steps that execute within the DevOps ecosystem and bring consistency and best practices in approach, tools, and standards. - Create and implement security solutions in an integrated development environment. - Actively participate and provide inputs in major design decisions working with Architects. Qualifications - US Citizenship and a Secret or Top Secret Clearance. - Security+ or Cloud+ certification. - Have historical and proven knowledge and practical application of DevSecOps (5 years). - Ability to fully configure pipelines in Gitlab (2 years). - Experience in RHEL Linux Administration (2 years). - Experience administrating cloud solutions in the AWS GovCloud environment (2 years). - Ability to independently deploy containerized applications to an AWS EKS Kubernetes cluster (1 year). - Ability to work independently, as well as part of a team, on multiple projects. - Strong oral and written communication skills along with excellent listening skills. - EKS experience. - Other skills/requirements: YAML, Gitlab, Kubernetes, Terraform/IAC. Requirements - Experience working with Navy Data. - Experience working with configuration management tools, i.e., Git, GitLab, others. - Agile/SAFe, and other related developer certifications and or demonstrate equivalent experience. - Experience with the principle of DevSecOps; Atlassian JIRA or other defect tracking tool experience. Company Description For more than 20 years, NewGen Technologies has solved our clients' toughest IT challenges with integrity, security, and outstanding service by delivering both technology and talent. We have helped secure borders, have used artificial intelligence (AI) to fight terror, aided the identification of criminals, and have helped to prevent crime through the introduction of biometrics. Our team of Highly Cleared Specialists have hard-to-find skills and expertise in a wide spectrum of technologies to provide solutions that transform business processes and solve problems of national significance.

