Software Engineer, Secured Infrastructure Programme Office
Mapletree Business City, Block 10,Level 9 / Level 11, Singapore
The Singapore Public Service
[What the role is]
The Government Technology Agency (GovTech) aims to transform the delivery of Government digital services by taking an "outside-in" view, putting citizens and businesses at the heart of everything we do. We also develop the Smart Nation infrastructure and applications, and facilitate collaboration with citizens and businesses to co-develop technologies.Join us as we support Singapore’s vision of building a Smart Nation - a nation of possibilities empowered through info-communications technology and related engineering.
Government Productivity Engineering
The Government Productivity Engineering (GPE) Division provides end-to-end solutions, encompassing both user-facing productivity tools and robust backend infrastructure, to support a wide array of operational needs. Our mission is to empower public officers to boost work productivity and enhance service delivery with digital tools, leveraging on a trusted, secure, and resilient Whole-of-Government Infrastructure.
How we work
Aside from formulating the infrastructure strategy and roadmap at WOG level, we also develop prototypes using new technologies and establish standards and best practices to guide the design and implementation of information systems that support the enterprise infrastructure.
We examine factors such as people, culture, policies and processes to provide a secure, predictive and always-on platform, enabling public officers to work anywhere and anytime.
By leveraging on innovative Cloud and Saas technologies, we architect, design, build and deliver Cloud and Datacentre hosting environments and common services which support government agencies in accelerating and developing modern applications and services.
Transforming ICT infrastructure through modernisation and automation is also our key focus. Using latest technology and best practices, we deliver secure and utility-based services to WOG, so that government agencies can function efficiently and seamlessly.
We are also passionate about building and uplifting ICT engineering know-how for the WOG in critical infrastructure domains, which we advance through experimentation, prototype development, consultancy and training.
[What you will be working on]
Secured Infrastructure Programme Office (SIPO), GPE
Secured Infrastructure Programme Office (SIPO) is a department of GPE committed to developing and maintaining secure, high-performance software solutions for critical applications for the Whole-of-Government (WOG). We operate in a highly regulated environment and prioritize the security and integrity of our systems. We are seeking a skilled and motivated Software Engineer to join our team and contribute to the development of robust and secure Windows/Office/intranet applications.
Job Summary:
The Software Engineer will be responsible for designing, developing, and maintaining enterprise applications in Windows/intranet environment that meet stringent security requirements. This role requires a strong understanding of Windows/Office internals, security best practices, and proficiency in one of the following programming languages: C/C++, C#, JavaScript, Java or Python. The ideal candidate will be passionate about building secure and efficient software and thrive in a collaborative team environment.
What you will be working on:
Design, develop, and maintain Windows/intranet applications using C/C++, C#, JavaScript, Python or other suitable programming language in the Windows environment.
Implement and adhere to secure coding practices and security standards (e.g., OWASP, SANS).
Develop and integrate security features, including encryption, authentication, and authorization mechanisms.
Perform thorough code reviews and security assessments.
Troubleshoot and debug complex issues in a secure environment.
Collaborate with security engineers and other developers to ensure application security.
Write comprehensive technical documentation, including design specifications, test plans, and security assessments.
Participate in the full software development lifecycle (SDLC), including requirements gathering, design, development, testing, and deployment.
Work with version control systems (e.g., Git) and CI/CD pipelines.
Maintain and update existing applications to address security vulnerabilities and improve performance.
Adhere to strict change management and configuration control processes.
Develop applications that comply with industry standards and regulatory requirements (e.g., NIST, ISO 27001).
Perform root cause analysis and implement effective solutions for security related issues.
Explore and innovate new disruptive and transformational technologies to deliver enhanced secured software solutions.
Who we are looking for:
Required Skills and Qualifications:
Bachelor's degree in Computer Science, Software Engineering, or a related field.
Proven experience in Windows/intranet application development using C/C++ or C# or equivalent language.
Experience with secure coding practices and security principles.
Familiarity with static and dynamic code analysis tools.
Experience with debugging and troubleshooting complex issues.
Proficiency in using version control systems (e.g., Git).
Excellent problem-solving and analytical skills.
Strong communication and collaboration skills.
Ability to work independently and as part of a team.
Understanding of secure software development lifecycle.
Preferred Skills:
Knowledge of cryptography, authentication, and authorization protocols.
Knowledge of network security protocols and concepts.
Strong understanding of Windows/Office APIs and internals.
Experience with virtualization and containerization technologies.
Certifications related to security (e.g., Security+, CISSP, CSSLP).
Experience in a regulated industry (e.g., finance, healthcare, government).
Experience with windows/office development.
Experience with Windows security features (e.g. UAC, AppLocker, BitLocker)
Experience with memory management and low level debugging.
Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programmes.
We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you.
Learn more about life inside GovTech at go.gov.sg/GovTechCareers.
Stay connected with us on social media at go.gov.sg/ConnectWithGovTech.
[What we are looking for]
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: APIs Application security Automation C CI/CD CISSP Cloud Code analysis Computer Science Cryptography CSSLP Encryption Finance ISO 27001 Java JavaScript Network security NIST OWASP Python SaaS SANS SDLC Security assessment Strategy Vulnerabilities Windows
Perks/benefits: Flex hours
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.