(Senior) DevSecOps Engineer

Job Exposure

Through structured on-the-job training and orientation, you will gain exposure to container operations practices, our terminal operating systems, overseas Business Units and corporate functions in our organisation. You will participate in a wide range of projects to work with teammates in Hong Kong, offshore teams, and overseas Business Units allowing you to apply and expand your functional expertise and professional network. You will also learn from experienced team members and established process documentation covering software development methodology and quality assurance programs.

Your key responsibilities will include:

• Lead and collaborate with in-house development teams, offshore teams, QA, architects, security officers, Business Unit IT teams, engineers, and external partners to plan and deliver DevSecOps solutions across cloud and on-premises environments.
• Facilitate agile development process using continuous integration and continuous deployment practices to deploy our applications to different environments.
• Enforce engineering best practices, software quality standards and application security controls throughout the development lifecycle.
• Automate test execution across different test cycles to improve the software quality feedback loop.
• Manage application release, versioning, deployment, and configuration activities.
• Automate infrastructure provisioning to standardize installation procedures and configurations.
• Maintain and monitor the health, availability, and performance of application, infrastructure, and DevSecOps platform components.

Desired Skills and Qualities

• University Degree holder in Computer Science, Information Engineering, or related discipline.
• With 8 years of working experience in application development and/or support, and at least 5 years of solid experience in DevSecOps.
• Minimum 2 years of experience in leading role in medium-to-large-sized projects.
• Certified Kubernetes Administrator (CKA) with solid experience of provisioning and supporting Kubernetes environments.
• Hands-on experience in CI/CD and Build tools including Git, Jenkins, Groovy, Maven, Gradle, npm, Yarn.
• Hands-on experience in IaC & Automation tools including Terraform, Ansible, Python, YAML.
• Hands-on experience in Container & Kubernetes using Kubernetes, Docker, Podman, Helm, ArgoCD
• Hands-on experience in DevSecOps practices, including SAST, dependency scanning, vulnerability management, and software supply chain security.
• Hands-on experience in artifact management tools such as JFrog Artifactory, Azure Container Registry.
• Good knowledge in infrastructure and application monitoring using monitoring tools such as Dynatrace, Grafana, EFK.
• Good knowledge in Windows and Linux servers.
• Knowledge of automated testing frameworks and tools such as JUnit, Selenium, Cypress, LoadRunner, Ranorex, and Playwright is an advantage.
• Certification in Azure platform such as System Administrator is an advantage.
• Experience in Jira, Confluence and Bitbucket is an advantage.
• Strong collaboration skills to work with different parties to deliver DevSecOps solutions.
• A team player with good analytical, problem solving and communication skills, and eagerness to learn.
• Good command of spoken and written English and Putonghua.
• Willingness to travel is required.
• Candidate with less experience will be considered as DevSecOps Engineer, with adjusted responsibilities and expectations.

We offer an attractive package commensurate with your qualifications and experience. Please send application enclosing resume stating career and salary history, expected salary and date of availability to apply.

Thank you for your interest in Hutchison Ports!

We are an equal opportunity employer and welcome applications from all qualified candidates. Personal data collected will be treated in the strictest confidence and handled confidentially by authorized personnel for recruitment-related purposes only within the Hutchison Ports Group of companies. Applicants not having heard from us within six weeks of the date of application may consider their applications unsuccessful. All personal data of unsuccessful applicants will be destroyed within 12 months from the date of application.