DevSecOps Engineer (Fixed-Term, 1 Year)

About the role

Activate Interactive, a technology consultancy in Singapore, is hiring a DevSecOps Engineer for its Co-Development Business Unit, working with Singapore government agencies. This is a fixed-term contract of 1 year. The engineer designs, automates and maintains secure, scalable and resilient infrastructure and deployment pipelines, integrating security into development workflows.

Key responsibilities

• Build automation and processes so teams can deploy, manage, scale and monitor applications in data centers and the cloud
• Troubleshoot system and application issues and take part in on-call escalations for critical incidents
• Deploy and manage monitoring tools and configure CI/CD pipelines with streamlined change management and release processes
• Implement configuration management, automate disaster recovery and provision VMs, databases, containers and licenses
• Design, build and monitor automation systems to improve service availability
• Plan, implement and monitor security architecture, including threat and risk assessments, vulnerability scans, system hardening and security checks
• Apply secure configurations and best practices in infrastructure and applications

Required profile

• Degree or diploma in Computer Science, Computer or Electronics Engineering, Information Technology or a related discipline
• Understanding of SDLC, TDD, CI and CD
• Experience with high availability, high performance, high security multi-data center systems and hybrid cloud environments
• Experience with high availability, high performance, high security multi-data center systems and hybrid cloud environments
• Experience implementing security controls in CI/CD pipelines and cloud-native architectures, and hands-on experience with security assessments, vulnerability scanning and hardening
• Experience in a DevSecOps-transformed organization and with security/compliance frameworks (ISO 27001, NIST, CIS benchmarks)
• Experience with API security, secrets management, zero-trust architectures and service mesh security (Istio, Linkerd)
• Experience in government or highly regulated environments and security certifications such as CREST, CISSP or CISM

Required skills

• At least three scripting languages (Bash, PowerShell, Python, Go)
• Git, public cloud platforms (AWS, Azure, Google Cloud) and provisioning tools (Ansible, Terraform, Puppet, Vagrant)
• KVM, VMware, Hyper-V, Docker, Kubernetes and CNCF tools (Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane)
• CI/CD tools (GitLab, Jenkins, BitBucket, ArgoCD) and infrastructure monitoring tools
• RPM-based packaging, disaster recovery, backup and restore, HashiCorp Vault, ElasticSearch Enterprise, Tenable, HP Fortify, Sonatype Nexus IQ, AWS security services

What we offer

• Market-competitive salary and variable performance bonus
• Outpatient and specialist medical coverage, life and health insurance, and flexible benefits or allowance
• Wellness initiatives, learning programmes, certification support and a staff development budget
• Structured career pathways on technical, domain expert or leadership tracks
• Flexible place, time and load arrangements