DevOps Engineer

at  Thales

Location: Singapore, Singapore
Thales people architect solutions at the heart of the defence-security continuum. Interoperable and secure information and telecommunications systems for defence, security, and civil operators, are based upon innovative use of radiocommunications, networks, and cybersecurity. We are ground breaking new digital technologies such as 4G mobile communications, cryptography, cloud computing and big data for use in physical protection systems, and critical information systems.
Thales established its presence in Singapore in 1973 to support the expansion of aerospace-related activities in the Asia-Pacific region. Throughout the last four decades, the company grew from strength to strength and is today involved in the primary businesses of Aerospace (including Air Traffic Management), Defence & Security, Ground Transportation and Digital Identity & Security. Thales today employs over 2,100 people in Singapore across all its business areas.

ESSENTIAL SKILLS & QUALIFICATIONS:

• System skillset :
• System Administration basics (services, ssh, OS packages management, etc)
• DevOps tooling advanced skillset :
• Extensive working experience (at least 3 years) with Containerization: Docker and Kubernetes
• Use of ArgoCD and Helm
• Developing and maintaining Ansible Playbooks
• Scripting experience in Shell, Bash, CMD and Powershell
• Using Jira and Gitlab
• Infrastructure as code skillset :
• Automated configuration using Ansible
• Network basics :
• Good working experience with NGINX and HAproxy deployment and configuration
• Familiar with commonly used network commands (e.g. curl, telnet, netstat)
• LAN architecture (CIDR, vLAN, routing, NAT)
• DNS and SSL (internal, external)
• Understand Network ACLs and request firewall access as required
• Security :
• Secrets management using various vaults (Kubernetes secrets, Hashicorp Vault, etc)
• TLS implementation with SSL in and out of Kubernetes
• SSH administration

GOOD-TO-HAVE SKILLS:

• System Administration advanced skillset (IPtables, systemd modifications, advanced kernel tuning, etc)
• Experience with different options of hypervisors (VMware, HyperV)
• Experience with Kubernetes Service Mesh (linkerd, istio)
• Build for the Run:
• Deploy and administrate monitoring and alerting tooling (grafana, prometheus)
• Craft monitoring and alerting thresholds
• Deploy and administrate a log concentration tool (ELK and Filebeat)
• Kafka cluster configuration
• Create custom searches and dashboards on Kibana
• Other useful skills:
• General technical architecture methodology understanding (RPO, RTO, SLA, flow matrix, …)
• SQL and NoSQL Database administration basics (ex : Database dump, clustering models, deployment architecture)
• Agile methodology and process understanding and experience
• Development skill with one of the following language: Java, .Net

The candidate will:

• Maintain the technical solutions for applications deployment and maintenance
• Maintain and even improve the means so that products are correctly and continuously integrated and deployed in quality assurance and production environments, respecting established rules.
• Support software teams on behavior testing, automated testing, and debugging of applications across various environments.
• Support service team with tools and custom scripts for applications maintenance, in a simple and efficient manner.
• Secure the product operability
• Understand the functional context of the product up to the point of challenging functional decisions.
• Evaluate the system continuously and objectively so that the product with underlying architecture is state of the art.
• Ensures that operational best practices (supervision/monitoring, backups, archives, log management) are implemented.
• Ensure the software team is informed and aware of operational constraints.