DevSecOps Engineer - A26366

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realise their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

Co-Development Business Unit is looking for DevSecOps Engineer

This is a 1 year contract role.

Internal Code: A26366

What will you do?

Enterprise Singapore seeks a DevSecOps Engineer to address critical operational requirements across its systems. This role is essential for implementing comprehensive automation and observability solutions, strengthening cloud operations capabilities, and fully realising the benefits of the organisation’s cloud investments and product-centric modernisation. The position requires specialised expertise in modern DevSecOps practices, platforms, cloud automation tools, and security operations to establish world-class operational practices in a cloud-native environment.

The successful candidate will strengthen cloud infrastructure capabilities and operational excellence by integrating monitoring, security, and automation practices into new product and infrastructure development. This role is crucial for embedding product-centric thinking, establishing robust observability frameworks, automating security controls, and optimising cloud operations at scale while maintaining compliance with government standards.

Product Engineering and Platform Management

The DevSecOps Engineer will plan, design, implement, and maintain shared DevSecOps capabilities for in-house and newly introduced digital products. This includes building reusable platform components, integrating observability into product delivery, and establishing standard engineering practices that enable product teams to deploy and operate services reliably. The role will also maintain the supporting frameworks, documentation, and operational controls required for business continuity and ongoing digital transformation.

Cloud Operations and Automation

Key responsibilities include establishing essential automation capabilities, such as the full-scale deployment of infrastructure as code, automating cloud operational processes, and creating reusable infrastructure products that enable product teams to transform or build their solutions more efficiently. The engineer will develop automated operational workflows to ensure consistent, secure, and efficient cloud operations while supporting Enterprise Singapore’s cloud-native environment. This includes optimising cloud operations to maximise the strategic value of the organisation’s cloud infrastructure investment.

Security Operations and Compliance

The role will embed security-by-design principles throughout the product and infrastructure lifecycle. Responsibilities include automating security checks and compliance controls within CI/CD pipelines, strengthening vulnerability and threat-detection capabilities, and supporting timely remediation. All solutions must comply with applicable government security policies, standards, and audit requirements without creating unnecessary friction for product teams.

Infrastructure and System Management

The DevSecOps Engineer will support the reliability and operability of Enterprise Singapore’s cloud-hosted products and shared services. This includes diagnosing complex issues across distributed environments, improving availability and performance through monitoring and automation, and contributing to incident response and problem management. The engineer will take end-to-end ownership of observability and operational tooling, including service health dashboards, alerting standards, runbooks, and continual service improvements.

Candidates should possess a degree or diploma in Computer Science, Computer or Electronics Engineering, Information Technology, or a related discipline, with relevant experience in DevSecOps, site reliability engineering, cloud platform engineering, or a comparable role. They should have demonstrated experience designing and operating automation, observability, and security capabilities in cloud-native environments. Experience supporting government, public-sector, or other highly regulated environments is strongly preferred.

Observability and Monitoring Expertise

The successful candidate must have hands-on experience implementing observability across applications, infrastructure, and distributed cloud services. This includes collecting and correlating metrics, logs, and traces; designing service health dashboards; defining actionable alerts; and supporting root-cause analysis. Experience with GovTech platforms, including StackOps where applicable, will be advantageous, together with the ability to establish consistent monitoring standards across product teams.

Cloud Operations and Automation

The candidate must be proficient in infrastructure as code, configuration management, and operational automation. Relevant experience should include automating cloud provisioning, certificate lifecycle management, Linux patching through Ansible, routine maintenance, compliance checks, and recovery activities. The candidate should also be able to create reusable modules and workflows that improve consistency, reduce manual effort, and enable product teams to adopt approved cloud patterns efficiently.

Security and Compliance

The candidate must have experience embedding security controls into cloud platforms and CI/CD pipelines, including vulnerability management, secrets and certificate handling, access control, security monitoring, and remediation tracking. A sound understanding of government security policies, regulatory requirements, risk management, and audit evidence is essential. The candidate should be able to translate these requirements into practical, automated controls that support secure and efficient product delivery.

Requirements

What are we looking for?

Strong proficiency in scripting and automation using languages such as Python, Bash, or PowerShell is required. The candidate should have practical experience with at least one major cloud platform, preferably AWS, together with container technologies such as Docker and Kubernetes, CI/CD platforms, Git-based workflows, and infrastructure as code tools such as Terraform and Ansible. Familiarity with monitoring and logging platforms, API integration, secrets management, and automated testing will be important for delivering reliable, shared capabilities.

Expected Outcomes

The successful candidate will deliver improved visibility of service health, more consistent and repeatable cloud operations, faster detection and resolution of incidents, and stronger integration of security controls into product delivery. The engagement is expected to reduce manual operational effort, increase the adoption of reusable infrastructure and automation patterns, strengthen compliance evidence, and enable product teams to release and operate cloud services with greater reliability and confidence.

Benefits

What do we offer in return?

Competitive Compensation: Market competitive salary and variable performance bonus aligned to your skills, impact, and contribution.

Benefits: Outpatient medical, specialist medical coverage and generous customisable flexi benefits, or flexi allowance; life and health insurance, thoughtful perks like special occasions “red packet” and CNY goodies, etc.

Employee Wellness: Support for your physical, mental, and overall well-being through year-round initiatives.

Growth & Development: Learning programmes, certification support, and a dedicated staff development budget. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Career Progression: Structured career pathways that enable you to grow along a technical/domain expert track or a leadership track.

Competency Framework: A structured and practical framework to support you to develop, perform, and succeed.

Flexible Work Arrangement: Staff may choose to work flexi-place, flexi-time, and flexi-load based on existing framework

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat.

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, colour, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.