DevSecOps Engineer - A26381

Activate Interactive Pte Ltd.; Singapore; On-site; SGD 110,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation

Variable performance bonus

Flexible work arrangement

Health insurance

Job summary

Activate Interactive Pte Ltd, a Singapore-based technology consultancy, is hiring for a DevSecOps Engineer on a fixed-term 1-year contract. You will design and manage CI/CD pipelines, automate tasks, and secure cloud infrastructure across AWS, IaC, and multiple environments.

You should have at least 2 years in DevSecOps, hands-on GitLab CI/CD, Terraform, Python or Bash, and familiarity with Docker/Kubernetes and security tooling.

Qualifications

• At least 2 years of experience in DevSecOps and/or cloud infrastructure management.
• Hands-on experience with GitLab CI/CD pipelines.
• Proficiency in managing AWS services (ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, NLB, EC2, Lambda).
• Scripting skills in Python or Bash for automation.
• Proficiency in Terraform for infrastructure-as-code.
• Familiarity with containerization technologies (Docker, Kubernetes).
• Experience with security tools and practices including SCA, container scanning.
• Familiarity with SRE principles and practices.
• Strong problem-solving skills and ability to work effectively in cross-functional teams.

Responsibilities

• Design, implement, and manage CI/CD pipelines using GitLab to support continuous integration, delivery, and deployment.
• Execute routine infrastructure tasks with minimal errors.
• Develop automation for recurring tasks with a focus on reuse and modularity.
• Use Terraform for infrastructure-as-code across deployments and changes.
• Independently deploy and configure complex systems and infrastructure components using IaaS, PaaS, and SaaS technologies across cloud environments, ensuring alignment with functional, security, and policy requirements.
• Develop implementation-ready architecture and configuration plans covering compute, storage, network, identity, security, and management systems.
• Develop and maintain automated scripts and tools to enhance DevSecOps processes including SCA and container scanning.
• Manage and optimize AWS services including ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, and NLB, etc.
• Implement security best practices in cloud environments, focusing on identity management, logging, monitoring, and incident response.
• Embed security practices throughout the software development lifecycle in collaboration with development and operations teams.
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify and remediate weaknesses.
• Contribute to building reliable monitoring, alerts, and observability setups (including Application Performance Monitoring); use data and analytics to troubleshoot and improve systems.
• Apply SRE concepts including error budgets, toil reduction, and SLI/SLO definitions in daily work.
• Drive infrastructure tasks from planning to completion independently; proactively fix or elevate issues before they worsen.
• Monitor and validate the impact of your work in production and POCs, incorporating user feedback and resolving issues promptly.
• Communicate risks early and propose solutions to team leads.
• Good to Have: Knowledge in MS Entra, MS Graph API, AWS Lambda (Python Serverless)

Skills

DevSecOps

Cloud infrastructure

GitLab CI/CD

Python Bash scripting

Terraform

Docker Kubernetes

Security tooling

SRE principles

Problem solving

Tools

Terraform

AWS

GitLab

Docker

Kubernetes

Job description

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

Co-Development Business Unit is hiring for DevSecOps Engineer

This is a fixed term contract role. The engagement is 1 year.

What will you do?

• Design, implement, and manage CI/CD pipelines using GitLab to support continuous integration, delivery, and deployment
• Execute routine infrastructure tasks with minimal errors
• Develop automation for recurring tasks with a focus on reuse and modularity
• Use Terraform for infrastructure-as-code across deployments and changes
• Independently deploy and configure complex systems and infrastructure components using IaaS, PaaS, and SaaS technologies across cloud environments, ensuring alignment with functional, security, and policy requirements
• Develop implementation-ready architecture and configuration plans covering compute, storage, network, identity, security, and management systems
• Develop and maintain automated scripts and tools to enhance DevSecOps processes including SCA and container scanning
• Manage and optimize AWS services including ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, and NLB, etc.
• Implement security best practices in cloud environments, focusing on identity management, logging, monitoring, and incident response
• Embed security practices throughout the software development lifecycle in collaboration with development and operations teams
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify and remediate weaknesses
• Contribute to building reliable monitoring, alerts, and observability setups (including Application Performance Monitoring); use data and analytics to troubleshoot and improve systems
• Apply SRE concepts including error budgets, toil reduction, and SLI/SLO definitions in daily work
• Drive infrastructure tasks from planning to completion independently; proactively fix or elevate issues before they worsen
• Monitor and validate the impact of your work in production and POCs, incorporating user feedback and resolving issues promptly
• Communicate risks early and propose solutions to team leads
• Good to Have: Knowledge in MS Entra, MS Graph API, AWS Lambda (Python Serverless)

• At least 2 years of experience in DevSecOps and/or cloud infrastructure management
• Hands-on experience with GitLab CI/CD pipelines
• Proficiency in managing AWS services (ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, NLB, EC2, Lambda)
• Scripting skills in Python or Bash for automation
• Proficiency in Terraform for infrastructure-as-code
• Familiarity with containerization technologies (Docker, Kubernetes)
• Experience with security tools and practices including SCA, container scanning
• Familiarity with SRE principles and practices
• Strong problem-solving skills and ability to work effectively in cross-functional teams

Preferred

• Experience with GCC-2.0 or Singapore Government cloud environments, penetration testing, Ansible
• Knowledge of MS Entra, MS Graph API, AWS Lambda (Python Serverless)
• AWS associate-level certification (e.g., \"AWS Certified SysOps Administrator, or relevant\")
• Background in software development with knowledge of secure coding practices

What do we offer in return?

Competitive Compensation:Market competitive salary and variable performance bonus aligned to your skills, impact, and contribution.

Benefits:Outpatient medical, specialist medical coverage and generouscustomisableflexi benefits, or flexi allowance; life and health insurance, thoughtfulperkslike special occasions “red packet” and CNY goodies, etc.

Employee Wellness:Support foryour physical, mental, and overall well-being through year-round initiatives.

Growth & Development:Learningprogrammes, certification support, and a dedicated staff development budget. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Career Progression:Structured career pathways that enable you to grow along a technical/domain expert track ora leadershiptrack.

Competency Framework:A structured and practical framework to support you to develop, perform, and succeed.

Flexible Work Arrangement:Staff may choose to work flexi-place,flexi-time, and flexi-load based on existing framework

Whyyou'lllove working with us?

If you are looking for opportunities to collaborate with leading industry experts andbesurrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. Webelieveyour success is our success.

Does it sound like something you are interested in exploring further?

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit,qualificationsand abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practiceson the basis ofrace,colour, religion,gender, sexuality, national origin, age, disability, maritalstatusor any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive PteLtd’srecruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you canrequest foraccess,correctionand/or withdrawal of your Personal Data.