M09 - DevSecOps Engineer

FPT Asia Pacific Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

FPT Asia Pacific Pte Ltd is seeking a DevSecOps Engineer to support an enterprise OutSystems-based application platform. You will manage environments, implement CI/CD pipelines, and uphold platform security, monitoring, and reliability.

You will collaborate with architects, infrastructure, developers, and security stakeholders to maintain a secure, scalable, and highly available platform across development to production. Relevant cloud and security experience is essential.

Qualifications

• Minimum 2 years of relevant experience in DevSecOps, DevOps, or application platform engineering.
• Hands-on experience with OutSystems including LifeTime deployment and environment management.
• Strong understanding of CI/CD pipelines and automated deployment processes.
• Proficiency in scripting languages (Bash, PowerShell, Python).
• Experience with cloud platforms (AWS, Azure, GCP).
• Familiarity with security testing tools and vulnerability management.
• Knowledge of container tech (Docker, Kubernetes).
• Experience with monitoring and logging tools and observability concepts.
• Ability to work in Agile environments and collaborate with cross-functional teams.

Responsibilities

• Manage OutSystems environments across development, testing, UAT, staging, and production.
• Configure LifeTime, Service Center, access control, and integration endpoints.
• Develop and maintain CI/CD pipelines for automated deployments and rollback procedures.
• Perform deployments with dependency checks, impact assessments, and post‑deployment validation.
• Implement and maintain platform security controls and secrets management.
• Incorporate security testing tools into CI/CD to identify vulnerabilities.
• Monitor performance, availability, errors, and usage; set up dashboards and alerts.
• Lead observability efforts with metrics, logs, tracing, and SLIs/SLOs.
• Support capacity planning, performance testing, and disaster recovery exercises.
• Provide incident support, root cause analysis, and knowledge sharing.

Skills

OutSystems

CI/CD

Scripting

Git

Cloud platforms

Monitoring/Observability

Security practices

Docker/Kubernetes

Agile/SDLC

Incident management

Education

Bachelor's degree or Diploma in Computer Science/Engineering/IT

Tools

LifeTime

Service Center

GitLab

Jira

Bitbucket

Confluence

Elastic

Grafana

Amazon CloudWatch

OpenTelemetry

Job description

Role Overview

We are looking for a DevSecOps Engineer to support the development, deployment, security, and ongoing operations of an enterprise case management application platform built on OutSystems.

The successful candidate will be responsible for managing application environments, implementing CI/CD pipelines, maintaining platform security, monitoring system performance, and ensuring reliable application delivery.

You will work closely with solution architects, infrastructure teams, application developers, and security stakeholders to maintain a secure, scalable, and highly available application platform.

Key Responsibilities

• Manage and maintain OutSystems environments across development, testing, UAT, staging, and production.
• Configure and manage OutSystems platform components, including LifeTime, Service Center, user access, role management, and integration endpoints.
• Develop, implement, and maintain CI/CD pipelines to automate application deployment, version control, release management, and rollback procedures.
• Perform application deployments, including dependency checks, impact assessments, change approvals, and post-deployment verification.
• Implement and maintain platform security controls, including secure configurations, secrets management, access policies, and vulnerability assessments.
• Integrate security testing tools into CI/CD pipelines to identify vulnerabilities and support remediation activities.
• Monitor application and platform performance, availability, errors, and usage through monitoring dashboards, logging, and alerting tools.
• Implement observability practices, including metrics, logs, distributed tracing, SLIs/SLOs, and alert management.
• Conduct performance testing, load testing, capacity planning, and performance optimisation to ensure platform stability.
• Troubleshoot application and platform issues, perform root cause analysis, and support incident and problem management.
• Support backup, restoration, business continuity, and disaster recovery testing.
• Coordinate with infrastructure teams to resolve hosting, networking, and cloud-related issues.
• Maintain security and compliance documentation, including configuration baselines, access reviews, vulnerability scan results, and change records.
• Support compliance with relevant ICT security policies, including IM8 and System Security Plan (SSP) requirements.
• Track and report OutSystems licence utilisation to support platform governance and cost optimisation.
• Support the deployment and management of AI-related components, including agent configurations, prompts, and security guardrails, through established CI/CD processes.
• Collaborate with application development teams to improve automation, deployment efficiency, platform reliability, and security practices.
• Participate in incident response, technical troubleshooting, and on-call support when required.
• Provide technical guidance, documentation, and knowledge sharing to development and engineering teams.

Requirements

• Diploma or Degree in Computer Science, Computer Engineering, Information Technology, Electronics Engineering, or a related discipline.
• Minimum 2 years of relevant experience in DevSecOps, DevOps, application platform engineering, or a related technical role.
• Candidates with 4 or more years of relevant experience may be considered for senior-level responsibilities.
• Hands-on experience with OutSystems (O11 or OutSystems Developer Cloud), including LifeTime deployment and environment management.
• Good understanding of the Software Development Life Cycle (SDLC), Continuous Integration, and Continuous Delivery.
• Experience implementing and maintaining CI/CD pipelines and automated deployment processes.
• Proficiency in scripting languages such as Bash, PowerShell, or Python.
• Experience using version control systems such as Git.
• Familiarity with cloud platforms such as AWS, Microsoft Azure, or Google Cloud.
• Experience with application monitoring and logging tools such as OutSystems Monitoring, Elastic, Grafana, or Amazon CloudWatch.
• Knowledge of application security testing tools such as SonarQube, HP Fortify, or Sonatype Nexus IQ.
• Understanding of secure coding practices, vulnerability management, and application security controls.
• Familiarity with container technologies such as Docker and Kubernetes.
• Experience with DevOps tools such as GitLab, Jira, Bitbucket, or Confluence.
• Knowledge of application performance monitoring, troubleshooting, and incident management.
• Basic understanding of government ICT security requirements, including IM8 and SSP.
• Familiarity with observability concepts, including metrics, logs, tracing, and alerting.
• Comfortable working in Agile development environments and collaborating with cross-functional teams.
• Strong analytical, troubleshooting, communication, and documentation skills.

Added Advantages

• OutSystems certifications.
• Experience supporting enterprise-scale or government-related application platforms.
• Experience with Government Commercial Cloud (GCC).
• Familiarity with security assessments and compliance requirements for government projects.
• Experience implementing DevSecOps transformation initiatives.
• Knowledge of Linux administration and network infrastructure.
• Experience with performance testing tools such as JMeter or k6.
• Experience implementing observability solutions using OpenTelemetry.
• Familiarity with application backup, restoration, and disaster recovery.
• Exposure to AI platforms, agentic AI components, or AI-related deployment pipelines.