Secure Cloud DevSecOps Engineer

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

This is a 12 months fixed-term contract role.

What will you do?

Responsible for designing, automating, and maintaining secure, scalable, and resilient infrastructure and deployment pipelines:

• Develop automation capabilities to deploy, manage, monitor, and maintain applications and infrastructure.
• Design and maintain CI/CD pipelines for application deployment and release management.
• Implement infrastructure-as-code and environment automation practices.
• Manage cloud resources and platform services.
• Develop and maintain CI/CD tooling and automation to support software build, testing, integration and release processes
• Monitor and optimize platform availability, performance, utilization, reliability, and operational health
• Implement security controls and ensure compliance with government security requirements.
• Plan, implement, and monitor system security architecture, including threat and risk assessments.
• Conduct vulnerability assessments, system hardening, security reviews, and remediation activities.
• Implement disaster recovery, backup, and business continuity measures.
• Investigate, troubleshoot, and resolve system, application, and infrastructure issues
• Collaborate closely with developers to integrate security throughout the software development lifecycle
• Coordinate and work together with other members of the team.

What are we looking for?

• Strong understanding of Software Development Lifecycle (SDLC), CI/CD, Test-Driven Development (TDD) and Dev Sec Ops  practices.

• Experience designing, deploying, and supporting cloud-native applications and infrastructure on AWS. Experience with GCC environment is advantageous.
• Proficiency in at least two programming/scripting languages (Bash, Power Shell, Python, Java script, or Java).
• Experience with infrastructure-as-code and automation tools such as Terraform, Ansible, or equivalent technologies.
• Experience with containerization and orchestration technologies including Docker and Kubernetes.
• Experience with source code management, Git Lab workflows, and CI/CD platforms.
• Experience implementing monitoring, logging and observability solutions to support platform reliability and operational excellence.
• Knowledge of application security and cloud security, secure coding practices, and Dev Sec Ops  principles.
• Hands-on experience with vulnerability management, security assessments, system hardening and remediation activities.
• Familiarity with cloud-native and Cloud Native Computing Foundation (CNCF) tools (Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane).
• Familiarity with enterprise security and secrets management solutions (Hashi Corp Vault, Tenable, Fortify, Sonatype Nexus IQ, AWS security services).
• Experience with AWS services related to identity and access management, networking, monitoring, container platforms, and security
• Strong…