DevSecOps Engineer - A26430

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realise their full potential, who in turn have the opportunity to continuously drive innovation.

Co-Development Business Unit is hiring

You will work in Singapore Government Agencies

This is a fixed term contract role. The engagement is 1 year.

Internal Code: A26430

What will you do?

• Develop automation and processes to enable application teams to deploy, manage, scale and monitor their applications on the case management application platform (built on OutSystems)
• Take ownership of platform-level solutions, and coordinate with the infrastructure team on hosting, network and infrastructure issues
• Manage platform configuration, including user and role management, access control, integration endpoints (e.g. APIs, SSO) and platform settings
• Own the CI/CD pipelines and release management process for applications hosted on the case management platform, including deployment plans, versioning and rollback, and approve production release readiness
• Implement platform and application observability (metrics, logs, traces) with defined SLIs/SLOs, dashboards and alert tuning, and report availability and performance against service levels
• Deploy and manage platform and application monitoring for performance, availability, errors and usage, and identify bottlenecks to maximise service availability
• Conduct performance and load testing, capacity planning and performance tuning with application teams to keep the case management platform responsive under enterprise workloads
• Lead system troubleshooting and problem solving across platform and application domains, run incident and problem management including root cause analysis and post-incident reviews, and lead on-call escalations for customer facing issues
• Support business continuity at the platform level, including application backup, restore and disaster recovery testing, in coordination with the infrastructure team
• Track and report OutSystems licence utilisation (e.g. application objects, users, environments) to support central governance and license cost optimisation
• Implement and maintain platform and application security controls, such as secure configuration, secrets management and access policies
• Perform threat and risk assessments at the platform and application level, and apply secure configuration profiles
• Employ best practices when implementing security controls within the platform and applications
• Implement security practices that comply with standards (e.g. IM8) to protect the organisation’s data and applications
• Maintain security and compliance evidence for ICT&SS / IM8 and the System Security Plan (SSP), such as configuration baselines, access reviews, scan results and change records
• Extend CI/CD pipelines and environment controls to promote agentic AI components (e.g. agent configurations, prompts, guardrail settings) consistently with the same approvals, scanning and rollback as application releases
• Provide technical guidance and peer review to other DevSecOps engineers and relevant application teams.

Requirements

What are we looking for?

• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.
• At least 4 years of experience relevant to DevSecOps engineering, preferably at the application platform level
• Experience operating the OutSystems platform (O11 or OutSystems Developer Cloud), including LifeTime deployment, environment management and platform monitoring
• Passion for automation, standardisation and best practices
• Excellent understanding of Software Development Life Cycle, Test Driven Development, Continuous Integration and Continuous Delivery
• Experience supporting high availability, high performance and high security applications in cloud and hybrid environments
• Demonstrable skills in scripting languages such as Bash, PowerShell or Python
• Experience with version control systems such as Git
• Experience with cloud platforms such as GCC (e.g. AWS, Azure, Google Cloud)
• Ability to troubleshoot complex issues ranging from platform configuration to application stack traces
• Experience with application performance monitoring and logging tools (e.g. OutSystems monitoring, Elastic, Grafana, CloudWatch)
• Knowledge of application security testing tools (e.g. HP Fortify, SonarQube, Sonatype Nexus IQ) and secure coding practices
• Knowledge of platform-level backup, restore and disaster recovery
• Knowledge of container technologies such as Docker, Kubernetes
• Experience with DevOps toolset like GitLab, JIRA, BitBucket, Confluence
• Working knowledge of Government ICT&SS management policies (IM8) and SSP requirements, and has applied them to security controls, monitoring and release processes
• Experience with observability practices (SLIs/SLOs, distributed tracing, alert design, e.g. OpenTelemetry) and performance testing tools (e.g. JMeter, k6)
• Comfortable with Agile methodologies and working closely with product development teams
• Strong on collaboration and communication including documentation
• OutSystems certifications
• Experience with security assessments pertaining to government projects
• Worked for an organisation which succeeded DevSecOps transformation
• Basic understanding of network infrastructure and Linux, to work effectively with the infrastructure team.

Benefits

What do we offer in return?

Competitive Compensation: Market competitive salary and variable performance bonus aligned to your skills, impact, and contribution.

Why you'll love working with us?

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at careers@activate.sg