DevSecOps Engineer - A26425

Activate Interactive Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

Flexi benefits

Learning & development budget

Flexible work arrangement

Job summary

Activate Interactive Pte Ltd, a Singapore-based technology consultancy, seeks a DevSecOps Engineer to design, build, and operate secure cloud-native infrastructure on AWS for a public sector modernization project. The role blends infrastructure engineering, cloud security, and secure software delivery.

You will implement IaC with Terraform, enforce security controls, integrate scanning into CI/CD, and ensure robust monitoring and incident response.

Qualifications

• Experience with Singapore Government or public sector security and compliance requisitos is an advantage.
• Hands-on experience setting up AWS cloud infrastructure.
• Terraform or equivalent IaC experience.
• Docker and Kubernetes (EKS) experience.
• CI/CD setup experience.
• Security-focused engineering practices.
• Security scanning tooling experience.
• Observability tooling experience (Dynatrace/Datadog).
• Production operations experience.
• Identity systems: ADFS, SAML, OIDC, CAM (GovTech).
• Comfort building and securing containerised apps in Golang, Kotlin, Next.js/TypeScript.

Responsibilities

• Set up modern cloud-native, containerised AWS infrastructure using IaC (Terraform) across dev, staging, prod.
• Apply cloud security controls: least-privilege IAM, network isolation, encryption at rest/in transit, container hardening.
• Integrate security scanning into GitLab CI/CD pipelines with pass/fail gates.
• Set up monitoring/observability with Dynatrace or Datadog; maintain runbooks.
• Support production deployments and incident resolution; contribute to post-incident reviews.
• Design, implement, and test backup/restore procedures for the platform.
• Integrate infrastructure with identity and access controls (ADFS, SAML, OIDC).
• Define secured infrastructure architecture and security baseline for the platform.
• Establish guardrails and secure practices across the team; mentor engineers.

Skills

AWS basics

Terraform

Docker

Kubernetes (EKS)

CI/CD

Security practices

Security scanning tools

Observability tools

Production operations

Identity and access management

Tools

Terraform

Docker

Kubernetes

GitLab CI/CD

Dynatrace

Datadog

Job description

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realise their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

What will you do?

We are looking for DevSecOps Engineers to design, build, and operate secure, cloud-native, containerised infrastructure on AWS for a Singapore public sector modernisation project. The role combines infrastructure engineering, cloud security, and secure software delivery, embedding security across infrastructure and the development lifecycle.

• Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS, and container registry across dev, staging, and production environments.
• Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit.
• Build security into the development process by integrating SAST, dependency, secret, container image, and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates.
• Set up and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog.
• Support production deployments and incident resolution, including writing and maintaining runbooks.
• Design, implement, and regularly test backup and restore procedures.
• Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM).
• Define the secured infrastructure architecture and security baseline for the platform.
• Set up and govern secure infrastructure standards, guardrails, and practices across the team.
• Provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices.
• Work with agency security teams on security reviews, compliance requirements, and remediation of findings.

What are we looking for?

• Experience with Singapore Government or public sector security and compliance requirements is an advantage.
• Technical skills (must have)
• AWS: hands-on experience with setting up AWS cloud infrastructure
• Infrastructure as Code: hands‑on experience with Terraform (or equivalent)
• Containers: hands‑on experience with Docker, Kubernetes (EKS)
• CI/CD: hands‑on experience in setting up CI/CD
• Security: hands‑on experience with application and infra security practices
• Security scanning tools: hands‑on experience with security scanning tools
• Observability: hands‑on experience with at least one observability tool
• Operations: hands‑on experience in production operations
• Familiarity with observability tools such as Dynatrace, Datadog
• Familiarity with building, containerising, and deploying applications in Golang, Kotlin, and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes
• Identity: ADFS, WOG AD, SAML, OIDC, CAM (GovTech Central Accounts
• Management)
• Trend Micro FAM and other infrastructure/container security tooling
• OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle
• Security‑first mindset with a practical, delivery‑focused approach.
• Clear documentation and communication skills.
• Senior Consultant: ability to influence engineering teams and explain security trade‑offs to stakeholders.

What do we offer in return?

Competitive Compensation:

Market competitive salary and variable performance bonus aligned to your skills, impact, and contribution.

Benefits:

Outpatient medical, specialist medical coverage and generouscustomisableflexi benefits, or flexi allowance; life and health insurance, thoughtfulperkslike special occasions “red packet” and CNY goodies, etc.

Employee Wellness:

Support foryour physical, mental, and overall well-being through year-round initiatives.

Growth & Development:

Learningprogrammes, certification support, and a dedicated staff development budget. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Career Progression:

Structured career pathways that enable you to grow along a technical/domain expert track or leadershiptrack.

Competency Framework:

A structured and practical framework to support you to develop, perform, and succeed.

Flexible Work Arrangement:

Staff may choose to work flexi-place, flexi-time, and flexi-load based on existing framework

Whyyou'lllove working with us?

If you are looking for opportunities to collaborate with leading industry experts and besurrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. Webelieveyour success is our success.

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, colour, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult your Privacy Notice () to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.