At a Glance
About This Role
Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.
In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.Responsibilities:
- Build and maintain CI/CD pipelines that support Agile teams and ARTs.
- Provision and manage environments (development, test, staging, production).
- Use infrastructure as Code (IaC) tools (i.e., Terraform, Helmfile, Ansible, Kubernetes Manifests) to ensure re-producibility and compliance.
- Ensure high availability and resilience in cloud and on-prem environments (e.g., zero-downtime deployment, blue/green and canary release strategies)
- Manage the automation and toolchain integration for code quality, security scanning, release management and monitoring; automate repetitive tasks to improve flow efficiency across the value stream, ensure the toolchain aligns with the Lean-Agile principles.
- Work closely with System Architects, Release Train Engineers (RTEs) and agile teams to align on delivery practices.
- Provide DevOps coaching to teams so they adopt the right practices for version control, branching strategies, and automated testing.
- Support Program Increment (PI) planning by ensuring environments and pipelines is ready.
- Develop security practices (e.g., Secrets Management) into the software delivery CI pipelines to ensure the artefacts are of the premium quality level (shift-left security).
- Automate compliance checks and enforce policies (e.g., code signing, container scanning).
- Develop systems observability practices (e.g., monitoring, logs, traces) to define and track metrics like deployment frequency, lead time for changes, change failure rate, and MTTR.
- Collaborate with InfoSec and Compliance teams to run regular security audits, risk assessments and data assessments.
- Contribute to disaster recovery planning and testing.
· Work in an agile, cross-functional multinational team, actively engaging to support the success of the team.
Requirements:
Education
· Bachelors in Computer Science or Information Technology
· Recognized Engineering degree
Essential Skills/Experience
- Strong expertise in Linux Operating System (i.e., Linux Process Sub-systems, Linux FileSystem)
- Strong expertise in Linux shell scripting (i.e., bash scripting)
- Strong expertise in designing and deploying Continuous Integration Pipelines for Software Development Teams
- Strong expertise in Secrets Management and Configuration Management of subsystems in a Container Orchestration Framework, such as Kubernetes.
- Strong expertise in designing, deploying & securing OCI containerized workloads (e.g., Docker, Kaniko) in Container Orchestration Frameworks (e.g., Kubernetes) running on-top of on-premises infrastructure and cloud infrastructure.
- Strong expertise in designing and implementing pro-active monitoring of production grade environments, incident response and allows swift mitigation of security threats.
- Expertise with observability tools like OpenTelemetry (OTEL) for monitoring and instrumentation, ensuring comprehensive visibility into system health and performance in Container Orchestration Frameworks.
- Demonstrated experience in working in data center environments; bonus if you have relevant experience on working in mission critical systems.
- Demonstrated ownership of the DevSecOps Mindset and demonstrated experiences of guiding the Software Development Teams in embracing the DevSecOps Mindset.
- Demonstrated experience in working in a multi-cultural and multi-disciplinary environment.
- Good communication skills in English.
Desirable Skills/Experience
If you have the following desirable skills and relevant experiences, it would be an added advantage!
- Relevant certifications such as Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKSS).
- Familiarity with popular DevOps tools (e.g., Jenkins, Git, Terraform) to enhance our Kubernetes development pipeline.
- Experience with CI/CD tools and practices integrated with Kubernetes, driving continuous improvement and deployment.
- Familiar with cloud-native deployment strategies to cloud service providers (e.g., Azure Cloud, Amazon Cloud, Google Cloud).
- Familiar with the main cloud service models: Software as a Service, Platform as a Service and Infrastructure as a Service.
Essential / Desirable Traits
· Possess learning agility, flexibility and pro-activity
· Comfortable with agile teamwork and user engagement
At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.
Source: Thales careers · View original posting
About Thales
Thales Group is a French multinational corporation based in Paris, specializing in aerospace and defense. Founded in 1893, the company has evolved through various mergers and rebranded as Thales in 2000 to unify its global presence. Thales designs and manufactures a wide range of systems, including defense electronics for air, land, sea, and space applications, as well as cybersecurity solutions that protect critical infrastructure. The company also provides aerospace avionics for both commercial and military aircraft, radar and sensor systems for surveillance and air traffic control, and secure communications systems. Operating in over 68 countries, Thales serves government, military, aerospace, and security sectors, generating significant revenue from its military activities. With a history of strategic acquisitions and partnerships, Thales continues to expand its capabilities and global footprint, delivering integrated solutions to a diverse range of customers worldwide.
Security at Thales
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Thales's application security philosophy, influenced by its Imperva acquisition, emphasizes the critical importance of API security, automated threat detection, and embedding security into development processes through DevSecOps.
- They state that "API security is no longer optional - it's fundamental to maintaining business continuity and trust."and that "As we step into 2025, the critical importance of application and API security has never been more evident."The company promotes "DevSecOps practices, embedding security into development processes."and highlights that "Imperva Application Security integrates advanced threat detection engines with automated inline responses."Furthermore, they acknowledge that "More than half of all internet traffic is now automated.".
Security Team
- Key public-facing leaders for application security include Tim Chang (Global VP & GM, Application Security) and Nanhi Singh (Head of Application Security Products / Chief Imperva Customer Officer as of blog date).
- As of, LinkedIn Jobs showed 17 Thales Security Engineer Jobs in United States (search summary), including DevSecOps and Application Security roles.
- Evidence describing the internal AppSec org model (centralized vs. embedded) and formal reporting line to CISO/CTO was not found in accessible public pages.
Key Initiatives
Thales/Imperva communications emphasize API security, detection and automated mitigation capabilities, and DevSecOps adoption driven by API growth. Specifically, "Imperva Application Security integrates advanced threat detection engines with automated inline responses"and promotes "DevSecOps practices, embedding security into development processes."Information regarding an internal Security Champions program, ticketing SLAs (e.g., MTTR or critical findings within X days), or detailed triage/remediation workflows are not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Thales's site