DevSecOps Engineer

Direct apply for a faster hiring process: www.binar.co.id/job-connect/344-devsecops-engineer

More about Job Connect by BINAR: jobconnect.binar.co.id

?You will build, maintain, and secure end-to-end CI/CD pipelines, manage cloud/on-prem infrastructure, and embed security practices throughout the software development lifecycle (SDLC).

• Design, build, and maintain end-to-end CI/CD pipelines (build, test, scan, deploy)

• Administer and troubleshoot Linux-based systems and environments, including system hardening

• Manage containerized workloads using Docker and orchestrate deployments with Kubernetes (deployment, scaling, cluster troubleshooting)

• Support Oracle Database administration basics, including SQL queries, connection configuration, and DB integration into pipelines/applications

• Implement Infrastructure as Code (IaC) using Terraform and/or Ansible

• Write automation scripts to streamline operational workflows

• Integrate security scanning (SAST, DAST, SCA) into the CI/CD pipeline

• Manage source code and version control workflows

• Apply security fundamentals — threat modeling, vulnerability management, secret management, and risk assessment

• Collaborate with development teams using Agile tools for issue tracking and documentation

• Minimum 3 years of experience in DevOps/DevSecOps or operations-focused software engineering

• Hands-on experience with Jenkins (Groovy/declarative pipeline) or similar tools such as GitLab CI or GitHub Actions

• Familiar with Jira for issue tracking & Agile workflow, plus collaboration tools such as Confluence

• Strong Linux administration, shell scripting, and troubleshooting skills

• Proficient in Docker and Kubernetes

• Understanding of Oracle Database (basic administration, SQL queries, connection configuration, integration with pipelines/applications)

• Experience with Infrastructure as Code (IaC): Terraform and/or Ansible

• Strong scripting/automation skills: Python, Bash, or PowerShell

• Solid understanding of security within SDLC — experience integrating SAST, DAST, and SCA tools (e.g., Snyk, OWASP ZAP, SonarQube, Trivy)

• Familiar with version control & source management: Git, Bitbucket/GitLab

• Experience with at least one cloud platform (AWS, Azure, or GCP) — a plus, not mandatory

• Solid understanding of fundamental security concepts: threat modeling, vulnerability management, secret management, and risk assessment

• Willing to work onsite (WFO) in West Jakarta

• Employment type: Contract

• Contract duration: 12 months (extendable)

• Location: West Jakarta

• Work type: On-site/Work from Office (WFO)

• Expected join date: August/September 2026 (immediate joiners are preferred)