Tech Lead - Engineering Platform - HIP(DevOps)

Position Overview

We are hiring a senior manager who will play an important role to enable Engineering teams in the design and development of secure and reliable healthcare applications for the transformation of Singapore Healthcare IT landscape. The potential candidate will be responsible for Engineering Platform which complies of DevSecOps platform, Tech Radar & AppSec services and the role will involve working together with Engineering teams to optimize their applications delivery by reducing cognitive load, enabling them to deliver with greater ease and efficiency.

Role & Responsibilities

DevSecOps Platform:

1. Platform Management: Manage the team working on platform infrastructure, operations, security, and roadmap to deliver new capabilities for platform.
2. DevOps Processes: Streamline and enhance the CI/CD processes to improve development efficiency and reduce time-to-market. Implement automation tools and practices to enable faster and more reliable deployments.
3. DevOps Services: Support projects onboarding to DevSecOps platform by creating/maintaining their CI/CD pipelines.

Tech Radar

1. Technology Assessment & Evaluation: Continuously monitor the technology landscape, including emerging trends focussing on “Frameworks & Languages, Platforms, Tools and Techniques”.  Work with team to assess the potential impact and relevance of emerging technologies by conducting in-depth research, experimentation, and proof-of-concept projects.
2. Tech Publication & Adoption: Regularly publish the outcome of technology assessment and evaluation, and work with the respective team for adoption.

AppSec

1. Manage and lead team to conduct application security design review and source-code security review to realise our vision of “shift-left” and continuous security review.
2. Provide technical leadership, guidance, and direction to the application security team.

Requirements

• Degree in Computer Science, Computer Engineering or equivalent
• Strong experience in engineering platform management
• Handson with DevSecOps, and popular security tools such as Checkmarx, Fortify, Nexus, SonarQube
• Hands-on coding experience for designing and implementing applications in common programming languages such as .NET, Java or ReactJS
• Good knowledge and experience in AWS or Azure cloud infrastructure, cloud native service design and development, especially the security best practice and implementation details to ensure design and implementation of cloud native application is secure and robust.
• Good knowledge of web application security concepts such as OWASP Top 10 , MITRE CWE, MITRE ATT&CK framework, D3FEND matrix and Threat Modelling Methodologies such as STRIDE
• Strong leadership and organizational abilities.
• Excellent communication, motivational, and interpersonal skills.

Apply Now

#LI-SYNX32