DevSecOps Engineer - A26381

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency. We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation. We are searching for our next team members to join our growing team. If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you. Co-Development Business Unit is hiring for DevSecOps Engineer This is a fixed term contract role. The engagement is 1 year. What will you do? • Design, implement, and manage CI/CD pipelines using GitLab to support continuous integration, delivery, and deployment • Execute routine infrastructure tasks with minimal errors • Develop automation for recurring tasks with a focus on reuse and modularity • Use Terraform for infrastructure-as-code across deployments and changes • Independently deploy and configure complex systems and infrastructure components using IaaS, PaaS, and SaaS technologies across cloud environments, ensuring alignment with functional, security, and policy requirements • Develop implementation-ready architecture and configuration plans covering compute, storage, network, identity, security, and management systems • Develop and maintain automated scripts and tools to enhance DevSecOps processes including SCA and container scanning • Manage and optimize AWS services including ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, and NLB, etc. • Implement security best practices in cloud environments, focusing on identity management, logging, monitoring, and incident response • Embed security practices throughout the software development lifecycle in collaboration with development and operations teams • Conduct regular security assessments, vulnerability scans, and penetration tests to identify and remediate weaknesses • Contribute to building reliable monitoring, alerts, and observability setups (including Application Performance Monitoring); use data and analytics to troubleshoot and improve systems • Apply SRE concepts including error budgets, toil reduction, and SLI/SLO definitions in daily work • Drive infrastructure tasks from planning to completion independently; proactively fix or escalate issues before they worsen • Monitor and validate the impact of your work in production and POCs, incorporating user feedback and resolving issues promptly • Communicate risks early and propose solutions to team leads • Good to Have: Knowledge in MS Entra, MS Graph API, AWS Lambda (Python Serverless) • At least 2 years of experience in DevSecOps and/or cloud infrastructure management • Hands-on experience with GitLab CI/CD pipelines • Proficiency in managing AWS services (ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, NLB, EC2, Lambda) • Scripting skills in Python or Bash for automation • Proficiency in Terraform for infrastructure-as-code • Familiarity with containerization technologies (Docker, Kubernetes) • Experience with security tools and practices including SCA, container scanning • Familiarity with SRE principles and practices • Strong problem-solving skills and ability to work effectively in cross-functional teams Preferred • Experience with GCC-2.0 or Singapore Government cloud environments, penetration testing, Ansible • Knowledge of MS Entra, MS Graph API, AWS Lambda (Python Serverless) • AWS associate-level certification (e.g., AWS Certified SysOps Administrator, or relevant) • Background in software development with knowledge of secure coding practices What do we offer in return? Competitive Compensation: Market competitive salary and variable performance bonus aligned to your skills, impact, and contribution. Benefits: Outpatient medical, specialist medical coverage and generous customisable flexi benefits, or flexi allowance; life and health insurance, thoughtful perks like special occasions “red packet” and CNY goodies, etc. Employee Wellness: Support for your physical, mental, and overall well-being through year-round initiatives. Growth & Development: Learning programmes, certification support, and a dedicated staff development budget. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”) Career Progression: Structured career pathways that enable you to grow along a technical/domain expert track or a leadership track. Competency Framework: A structured and practical framework to support you to develop, perform, and succeed. Flexible Work Arrangement: Staff may choose to work flexi-place, flexi-time, and flexi-load based on existing framework Why you'll love working with us? If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success. Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat. Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, colour, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics prote…