DevSecOps Engineer - A26425

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realise their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

Co-Development Business Unit is hiring

You will work in Singapore Government Agencies

This is a fixed term contract role. The engagement is 1 year.

Internal Code: A26425

What will you do?

We are looking for DevSecOps Engineers to design, build, and operate secure, cloud-native, containerised infrastructure on AWS for a Singapore public sector modernisation project. The role combines infrastructure engineering, cloud security, and secure software delivery, embedding security across infrastructure and the development lifecycle.

• Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS, and container registry across dev, staging, and production environments.
• Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit.
• Build security into the development process by integrating SAST, dependency, secret, container image, and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates.
• Set up and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog.
• Support production deployments and incident resolution, including writing and maintaining runbooks.
• Design, implement, and regularly test backup and restore procedures.
• Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM).
• Define the secured infrastructure architecture and security baseline for the platform.
• Set up and govern secure infrastructure standards, guardrails, and practices across the team.
• Provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices.
• Work with agency security teams on security reviews, compliance requirements, and remediation of findings.

Requirements

What are we looking for?

• Experience with Singapore Government or public sector security and compliance requirements is an advantage.
• Technical skills (must have)
• AWS: hands-on experience with setting up AWS cloud infrastructure
• Infrastructure as Code: hands-on experience with Terraform (or equivalent)
• Containers: hands-on experience with Docker, Kubernetes (EKS)
• CI/CD: hands-on experience in setting up CI/CD
• Security: hands-on experience with application and infra security practices
• Security scanning tools: hands-on experience with security scanning tools
• Observability: hands-on experience with at least one observability tool
• Operations: hands-on experience in production operations
• Familiarity with observability tools such as Dynatrace, Datadog
• Familiarity with building, containerising, and deploying applications in Golang, Kotlin, and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes
• Identity: ADFS, WOG AD, SAML, OIDC, CAM (GovTech Central Accounts
• Management)
• Trend Micro FAM and other infrastructure/container security tooling
• OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle
• Security-first mindset with a practical, delivery-focused approach.
• Clear documentation and communication skills.
• Senior Consultant: ability to influence engineering teams and explain security trade-offs to stakeholders.

Benefits

What do we offer in return?

Competitive Compensation: Market competitive salary and variable performance bonus aligned to your skills, impact, and contribution.

Benefits: Outpatient medical, specialist medical coverage and generous customisable flexi benefits, or flexi allowance; life and health insurance, thoughtful perks like special occasions “red packet” and CNY goodies, etc.

Employee Wellness: Support for your physical, mental, and overall well-being through year-round initiatives.

Growth & Development: Learning programmes, certification support, and a dedicated staff development budget. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Career Progression: Structured career pathways that enable you to grow along a technical/domain expert track or a leadership track.

Competency Framework: A structured and practical framework to support you to develop, perform, and succeed.

Flexible Work Arrangement: Staff may choose to work flexi-place, flexi-time, and flexi-load based on existing framework

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat.

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, colour, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.