DevSecOps Engineer - A26320

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realise their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

Co-Development Business Unit is looking for DevSecOps Engineer

This is a 1 - year contract role.

Internal Code: A26320

Digital Excellence & Products Division (DXD) is a GovTech team within the Ministry of Education (MOE). DXD sits at the intersection of technology, design, and education, building meaningful products, platforms, and digital services that improve teaching, learning, school operations, and the experience of students, teachers, and school leaders.

We are looking for a DevSecOps & Engineering Enablement Engineer to establish and operate a consistent, secure, and reliable process for moving code from development to production for the future SSOE platform.

You will centrally manage the tools, pipelines, standards, and automation that engineering teams use to build, test, review, secure, and deploy their code.

The objective is to ensure that code progressing towards production is not only deployed successfully, but is also functionally working, secure, tested, and of the required quality. Relevant security, testing, and quality gates should be built directly into the delivery process and applied consistently across engineering teams.

You will also drive the responsible use of AI within the software development lifecycle, including AI-assisted code review, testing, security analysis, documentation, and engineering feedback.

What will you do?

• As a DevSecOps & Engineering Enablement Engineer, you will provide the common engineering capabilities used by application, observability, platform, data, and infrastructure teams across SSOE Common Services.
• Engineering teams remain responsible for the software and services they build. You will own and continuously improve the paved road from code to production.
• The aim is to provide engineering teams with a common and automated route from development to production, with security, quality, and functional verification built into the process rather than performed separately at the end.

Software Delivery and CI/CD

• Own and operate the common CI/CD capabilities used across SSOE Common Services
• Design and maintain reusable pipelines for building, testing, validating, and deploying software
• Establish consistent processes for promoting changes through development, testing, staging, and production environments
• Define the security, quality, testing, and approval gates required at each stage of the software delivery lifecycle
• Automate deployment and post-deployment functional verification wherever appropriate
• Ensure applications and services are verified to be healthy and functioning as expected before a deployment is considered successful
• Support deployments across on-premise, GCC, AWS, Azure, and hybrid environments
• Ensure failed deployments can be stopped, retried, recovered, or rolled back safely
• Reduce manual deployment activities through repeatable and auditable automation
• Continuously improve pipeline reliability, execution time, developer feedback, and deployment success rates

Security and Quality Gates

• Build appropriate security and quality checks directly into CI/CD pipelines
• Automatically check source code, dependencies, containers, configuration, and Infrastructure as Code for relevant security issues
• Detect credentials, secrets, or sensitive information accidentally introduced into source repositories
• Integrate automated unit, integration, and other relevant tests into the delivery process
• Establish code-quality checks and minimum standards before changes can progress
• Define appropriate approval requirements for higher-risk or production changes
• Ensure failed mandatory checks prevent changes from progressing until the issue is addressed
• Work with engineering and security teams to determine which controls should be mandatory and which should provide advisory feedback
• Regularly review gates to ensure they continue to provide useful assurance without introducing unnecessary delivery delays

Functional Verification

• Define standard approaches for verifying that applications and services are functioning correctly after deployment
• Automate smoke tests, health checks, integration tests, or other appropriate post-deployment validation
• Ensure deployment success is based on the actual health and functionality of the deployed service, not simply whether the deployment command completed successfully
• Integrate observability and application health information into deployment verification where appropriate
• Automatically stop or roll back deployments when critical validation fails
• Work with application teams to establish meaningful acceptance criteria for production deployments

AI-Assisted Software Development

• Introduce appropriate AI capabilities into code review and software delivery workflows
• Use AI to assist engineers in identifying possible defects, security issues, maintainability concerns, and engineering-standard violations
• Explore AI-assisted generation and improvement of automated tests
• Use AI to assist with technical documentation and explanations of code changes
• Explore AI-assisted diagnosis of failed builds, tests, security checks, and deployments
• Establish clear rules governing what source code, configuration, and information may be provided to AI services
• Ensure engineers remain responsible for reviewing and approving AI-generated code and recommendations
• Measure whether AI capabilities improve software quality, security, review time, and engineering productivity

Infrastructure and Operational Automation

• Build and maintain reusable Terraform / OpenTofu modules for infrastructure provisioning
• Build and maintain Ansible automation for configuration and operational activities
• Ensure infrastructure and configuration changes follow the same controlled development-to-production process as application code
• Automate infrastructure validation, security checks, approval, deployment, and verification
• Automate repeatable operational activities such as provisioning, patching, configuration changes, and account lifecycle management
• Ensure automation is testable, repeatable, auditable, observable, and recoverable

Engineering Team Support

• Provide engineering teams with reusable pipelines, templates, automation, documentation, and examples
• Help teams adopt common development, testing, security, and deployment practices
• Reduce the need for individual teams to create and maintain their own CI/CD solutions
• Identify manual or repetitive engineering activities that can be automated
• Work with engineering teams to understand and remove friction in the software delivery process
• Make common engineering activities self-service where practical

What are we looking for?

• Minimum 3–5 years of experience in DevSecOps, DevOps, platform engineering, infrastructure engineering, SRE, software engineering, or a related role
• At least 2 years of hands-on experience designing, building, or operating production CI/CD and deployment automation
• Experience implementing automated testing, security, and quality gates within CI/CD pipelines
• Experience implementing post-deployment validation, health checks, smoke testing, or similar functional verification
• Experience with Infrastructure as Code and configuration automation
• Experience building reusable pipelines or automation used by multiple engineering teams
• Experience with Git-based development, code review, automated testing, and software releases
• Experience deploying applications or infrastructure into on-premise and/or cloud environments
• Experience troubleshooting failed builds, tests, deployments, and automation workflows
• Experience with AI-assisted software-development tools is useful but not mandatory. Strong DevSecOps fundamentals and an ability to evaluate and adopt new engineering technologies are more important.
• GitLab CI/CD, SHIP-HATS, Git and automated software delivery
• Automated testing, smoke testing, health checks, integration testing and post-deployment verification
• Automated security, code-quality, dependency, secrets, container and infrastructure checks
• Terraform / OpenTofu
• Ansible, Python, Bash or equivalent
• AI-assisted code review, testing, security analysis, documentation and engineering workflows
• Infrastructure On-premise, GCC
• Docker, Kubernetes / OpenShift or equivalent
• Monitoring, logging and health verification of pipelines, deployments and applications

What do we offer in return?

Competitive Compensation: Market competitive salary and variable performance bonus aligned to your skills, impact, and contribution. 

Benefits: Outpatient medical, specialist medical coverage and generous customisable flexi benefits, or flexi allowance; life and health insurance, thoughtful perks like special occasions “red packet” and CNY goodies, etc. 

Employee Wellness: Support for your physical, mental, and overall well-being through year-round initiatives. 

Growth & Development: Learning programmes, certification support, and a dedicated staff development budget. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”) 

Career Progression: Structured career pathways that enable you to grow along a technical/domain expert track or a leadership track. 

Competency Framework: A structured and practical framework to support you to develop, perform, and succeed. 

Flexible Work Arrangement: Staff may choose to work flexi-place, flexi-time, and flexi-load based on existing framework 

Why you'll love working with us? 

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success. 

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat.

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, colour, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law. 

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd. 

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes. 

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.