Official website links end with .gov.sg
A Singapore Government Agency Website
How to identify
Secure websites use HTTPS
STACK 2024 Developer Conference
Dr Dr Janil PUTHUCHEARY
Senior Minister of State, Ministry of Digital Development and InformationThis talk explores the landscape of AI coding assistants, from code completion tools to chatbots, and examines the implications of their adoption. The presentation will also highlight GovTech’s efforts in driving the adoption across the sector
Mr CHANG Sau Sheong
Chief Technology Officer and Deputy Chief Executive (Products), GovTech Singapore
Mr Suthen Thomas PARADATHETH
Chief Technology Officer, GrabLearn about the magic of developer platforms and how they defy the IT laws of physics: platforms spur innovation despite harmonization; they speed up development while assuring compliance; and they reduce cognitive load without restricting choice. But building such an in-house platform, or even deploying one, is far from easy. Gregor packages his experience in building platforms into a series of mental models and metaphors that will help you understand design decisions and trade-offs. You'll also find out how platforms are related to cars, submarines, and fruit salads!
Mr Gregor HOHPE
Author, Architect Elevator SeriesMr CHANG Sau Sheong
Chief Technology Officer and Deputy Chief Executive (Products), GovTech SingaporeMr Gregor HOHPE
Author, Architect Elevator Series
Ms Rachel LAYCOCK
Global Chief Technology Officer, Thoughtworks
Mr Dominic CHAN
Chief Information Officer & Assistant Chief Executive (Products), GovTech SingaporeIn a rapidly evolving technological landscape with heightened security concerns, automating governance processes has become essential for organisations. This presentation explores how the Singapore Government has embraced an innovative approach to automate policy enforcement and streamline governance processes through technology. Through real-world examples and practical insights, attendees will discover how organisations can leverage Policy as Code to drive significant change, improve decision-making, and succeed in the digital era. Attendees can expect to gain valuable knowledge and insights on how to effectively implement ICT governance strategies using Policy as Code principles."
Mr Hunter NIELD
Distinguished Engineer, GovTech Singapore
Mr Eugene LIM
Senior Software Engineer, GovTech SingaporeAgile Software development is a fun filled collaborative team sport that promotes adaptability and flexibility as the first-class citizen, but we continue to see challenges across multiple industries such as: - Lack of collaboration, resistance to change in adopting new ways of working - Ineffective and manual approach towards building software, accumulated shortcuts leading to massive and unmanaged technical debt - Inadequate ways of measuring productivity and efficiencies - Slow feedback loops - Command and control ways of working - Lack of engineering practices, inappropriate use of tools adding to burden -Last, but not least, following agilefall The goal of our talk is to share some practical ways to overcome these challenges through continuous delivery practices and meaningful metrics, and where AI can be leveraged to enhance efficiency. We will also talk about some blind spots e.g. misunderstood or misuse of matrices could lead to unintended consequences. Whether you're a developer, team lead, or manager, you will leave with a deeper understanding of meaningful metrics, practical engineering practices, and actionable insights to enhance their team's productivity and collaboration.
Ms Thao DANG
Head of Enterprise Modernisation, Platforms and Cloud APAC, Thoughtworks
Mr Nouman MEMON
Technical Director, ThoughtworksIn web development, perception is reality. A website that feels fast is fast, no matter what the metrics say. Discover the art and science of perceived performance in React applications. We'll explore proven patterns and techniques used in large-scale codebases to create lightning-fast user experiences that lead to happier customers and higher conversions. Learn how to make your React apps not just performant, but feel instantaneous to your users. Topics include reducing/removing layout junk, better use of loading indicators, pre-fetching resources, leveraging the browser cache, image loading optimisation, and much more.
Mr Trung VO
Engineer Manager, AscendaWith increasing digitalisation, citizens are also increasingly vulnerable to malicious actors online. With the rise in scam cases in recent times, GovTech seeks to keep citizens safe from possible scams through the development of the Scam Website Classifier (rMSE), which automatically evaluates potential scam sites using their technical attributes and enables the Government to substantially scale its anti-scam efforts through the use of machine learning.
Ms Chloe LIM
Senior Product Manager, GovTech SingaporeAccurate detection and mitigation of vulnerabilities found in application source code is part of the shift-left paradigm embraced in Whole-of-Government (WoG), where security efforts are initialised at earlier stages of the software development lifecycle. Given the volume and frequency of changes made to the codebase, manual reviews are impractical, not to mention inefficient, laborious and highly dependent on the experience of the reviewer. This has pushed for widespread adoption of Static Application Security Testing (SAST) tools to automate the process. Commercial-off-the-shelf SAST tools analyse the input code with a series of rules that are crafted with generic rules that are neither precise nor have a high recall. This led to more false positives than can be reasonably triaged and managed by the development team, while missing multiple vulnerabilities within the source code. This makes the SAST tool hard to use and depend on for important and actionable warnings as the accurate findings are few and far between, buried within the long alert list - a proverbial needle-in-the-haystack situation. The abysmal performance of commercial SAST tools can be partly attributed to their inability to keep pace with the increasing complexity of modern software applications that hinders a precise modelling by the SAST tool. To address these challenges in both source code modelling and poor detection performance, Project Titan aims to leverage the ability of LLMs to capture source code semantics to build a just-in-time vulnerability discovery tool. Preliminary studies by the team have pointed to the potential of LLMs to be an effective, language-agnostic platform for such a task. This solution will build on general-purpose and open-source models fine-tuned for the task of vulnerability discovery with publicly available data, before a contextualisation phase to adapt it to WoG source code. Project Titan is an attempt by the team to work on a multi-faceted challenge in the form of developing a large-scale, contextualised vulnerability detection tool powered by LLMs. This talk aims to highlight the thinking and process behind the tool’s conceptualisation. It will also include a section on the challenges that the team encountered during the development process, and the iterative nature with which these challenges have been addressed.
Dr ANG Han Wei
Cybersecurity Engineer, GovTech Singapore
Dr Martin WEYSSOW
Research Scientist, Singapore Management UniversityEvery year, Singaporean-registered companies have to submit the salary data of their employees under the Auto-Inclusion Scheme (AIS) to the Inland Revenue Authority of Singapore (IRAS). Every quarter and every year, they also need to update the Ministry of Manpower (MOM) on changes to their workforce composition and complete a labour survey. Every month, the Central Provident Fund Board (CPFB) requires employers to submit details of their contributions to their employees. The data required for filing to the different government agencies are all stored in the companies’ payroll or HR software. How might we integrate with the HR and payroll software so that the submission process can be streamlined, reducing the manual efforts and saving employers valuable time and resources? Enter APEX, which could consolidate APIs from different agencies on its platform and facilitate secured access and integration by developers, including the HR and payroll software vendors. By housing all required APIs and submitting necessary information to the three agencies, APEX eliminates the need for manual submissions, reduces administrative workload, and promotes compliance with payroll-related regulatory obligations.
Dr YAP Ghim Eng
Director, GovTech Singapore
Mr LEONG Shi Wei
Director, Data & Ecosystem Management, Inland Revenue Authority of SingaporeThe Housing and Development Board (HDB) is actively pursuing its IT Transformation goals by leveraging the Cloud to achieve scalability and availability. As part of this initiative, HDB has adopted a distributed approach in designing its cloud architecture, as opposed to a shared common infrastructure or monolithic technology stacks that some may adopt. This shift towards distributed systems in the cloud offers increased flexibility, enabling each cloud product to architect and rapidly develop their resources and applications based on their specific requirements. Additionally, it allows for the isolation of risks within the boundary of a defined system. This approach also facilitates the utilisation of auto-scaling and on-demand services to balance performance and costs, while minimising the risk of a single point of failure that large shared technical stacks are susceptible to. However, the autonomy of distributed products also presents its own set of challenges, responsibilities, and overheads that each individual product needs to address. One such complexity is the need for continuous application and health monitoring, which scales horizontally with every cloud product released. The lack of a 'single-pane of glass' visibility across the board can be disconcerting to the organisation when the health and performance of their distributed workload are left in the dark. To tackle this challenge, StackOps, the Singapore Government Tech Stack (SGTS) product for continuous log monitoring, has provided HDB with a platform and tools to unify logs, metrics, and traces from distributed systems. The Cross-Cluster Search capability allows HDB's Security and Enabling teams to monitor all HDB Elasticsearch clusters from a single Kibana console, eliminating the need to toggle between various monitoring platforms. Additionally, this capability provides insights into the alerts' indices of the distributed clusters, which are alerts generated based on privileged or suspicious activities processed according to Elastic's security rules. By leveraging these native Elastic security features, HDB has been able to centrally curate its own privileged activity review processes and workflow for distributed product teams, saving costs from onboarding separate tools to manage and track the completion of log reviews, while ensuring compliance with privileged activities log reviews for all teams.
Mr Scott Nathaniel LIM
Senior Software Engineer, Housing & Development Board
Mr TAN Wee Kiat
Senior Software Engineer, Housing & Development BoardSuccessful UX design is not just about creating aesthetically pleasing interfaces but also about making informed, strategic decisions that align with both user needs and business goals. This talk "Designing Success Together: UX Strategies for Facilitating Decision-Making" aims to provide the audience with the essential strategies and tools to guide clients towards making smart, collaborative decisions. This talk will highlight on 4 key topics: Understanding client needs, Design thinking, Collaboration and Facilitations, and Prioritisations.
Ms Falaumaina MOHD SHARIL
Lead UX Designer, GovTech SingaporeIn the rapidly evolving world of AI, measuring developer productivity and experience requires more than just tracking output—it demands a holistic approach that captures the multifaceted nature of engineering work while keeping the focus on the driving force behind it all: the developers themselves. Enter the SPACE framework, a comprehensive model designed to assess developer productivity across multiple key dimensions. In this session, we’ll revisit the SPACE framework and explore how its principles remain not only relevant but essential in this new AI-driven era. We’ll discuss how AI is reshaping traditional workflows, influencing developer experience and why understanding these impacts through SPACE is more critical than ever. At its core, the framework ensures that the well-being of developers—the people behind the code—remains central to the conversation about productivity. You’ll walk away with practical insights on how to apply the SPACE framework to measure and improve your team's developer experience, while also navigating the opportunities and challenges brought by AI. Whether you're looking to optimize your team's focus time, gauge the effectiveness of AI-enhanced tools, or ensure collaboration and well-being in hybrid work environments, this talk will offer actionable strategies to help your developers thrive.
Mr Brian HOUCK
Senior Principal Applied Scientist, MicrosoftThe Kanban Method is a modern 21st-century knowledge management method that produces agility and transformative improvements to organizations. Out of the six practices of the Kanban Method, there is one that is the most contentious to implement but it will bring you tremendous results. This session is delivered by an experienced Kanban Coach and Trainer who has experience in implementing Kanban Systems successfully in multiple organizations. You will learn why this practice is controversial, how it will help transform your team into a hyper-productive one with the maths to back it up, and how teams adopt this practice using an evolutionary approach. After this, you will never manage work in the same way again.
Mr Shalom CHIN
In today's digital age, public service agencies are increasingly creating, receiving, and working with multimedia assets. Effectively managing this growing volume of media content is crucial to fostering a coherent information ecosystem that facilitates flexible organization, efficient discovery, and seamless exchange of these assets and the insights contained within them. In this talk, we will introduce MediaDex, a content management platform that integrates intuitive user interfaces with smart processing capabilities to allow agencies to leverage the full value of their content. MediaDex brings together content repositories, applications and workflows across WOG to not only deliver immediate time savings, but also empower public officers to transform how they work with media.
Mr Henry LIM
Lead Product Manager, GovTech SingaporeCurrently, there is huge interest in AI development using LLM models. Everyone is scrambling to build a proof of concept. However, rolling out AI apps or that cool chatbot goes beyond monitoring performance. Security, cost and more intangible qualitative measures like sentiment, truthfulness, bias, and toxicity play a key role. Amidst an evolving landscape, we look at what are the potential "golden signals" (inspired by Google SRE handbook) of AI apps that can help us better design and operationalize our ideas.
Mr Jon TAN
Solution Engineer, DatadogWhile DORA, SPACE, and DevEx provide valuable guidance, the growing number of frameworks can make it difficult to decide what to measure. Join this session with Abi Noda, CEO of DX, to learn about the recently published DX Core 4. The DX Core 4 is a unified framework for measuring developer productivity that encapsulates DORA, SPACE, and DevEx. Learn about how the DX Core 4 provides a standardized measurement approach that's useful at all levels of the organization—from the boardroom down to frontline teams.
Mr Abi NODA
Chief Executive Officer & Co-founder, DXOne of Digital Ops-Tech Centre (DOTC) product is Pinpoint, pinpoint.gov.sg, a Digital Asset Management tool that helps in archiving and retrieving media items such as images and video. Pinpoint is open to WoG use, but is designed and developed at the start with military users in mind. In this talk, we would like to share how we did the user journey to designing and implementation of the collaboration feature within our application. A key highlight is how we had to adapt to the SAF's users way of working and the different layers and restrictions they require whilst collaborating with their media data. The talk will first give an overview of who is Pinpoint's users, what are we trying to solve, and how we solved it. We will further delve into our collaboration feature and how we had to adapt the engineering of collaborative space permissions to address SAF specific needs.
Mr FOO Chi Fa
Software Engineer, Digital Ops-Tech CentreThis session will focus on Security, Data Governance and Protection Strategies that an organisation should consider when embarking on a Data and AI journey, this includes identifying the potential risks and threats to Generative AI (GenAI) and Large Language Models (LLMs) and the necessary controls one should consider when experimenting or fully adopting AI as a part of your business.
Mr Wasim EL-OMARI
Distinguished Security Field CTO, SnowflakeToday, we journeyed through the shift from Low-Ops to No-Ops, tackling major challenges in IT Operations. We explored how tools like JSMOps help streamline alert flow, reduce alert fatigue, and speed up incident resolution, building a more resilient and efficient environment. A key part of this transformation involves the use of chatbots and LLMs to automate ticket responses and even create tickets when necessary. By handling routine inquiries and escalations, these AI tools can help eliminate the need for L1 support, freeing teams to focus on higher-impact tasks. As you consider your own workflows, think about how automation, AI, and better alert practices can move your team toward this vision of a proactive, resilient Ops culture."
Mr LEE Vern Hui
DevOps Engineer, GovTech Singapore
Mr Muhammad Arif ISMAM
Senior Devops Engineer, GovTech SingaporeSince last year, the integration of generative artificial intelligence (AI) into governmental systems has emerged as a transformative force, promising more efficient, transparent, and responsive governance. Despite the initial enthusiasm and investment, only a select few prototypes successfully navigate the complex journey to production-grade status. Transitioning Gen AI prototypes to scalable, production-ready solutions presents a unique set of challenges. This presentation aims to explore the journey from Gen AI prototypes to production-grade applications in government settings, drawing upon real-world implementations of Generative AI (Gen AI) technologies. By examining application patterns and sharing key insights gleaned from these deployments, attendees will gain valuable knowledge and actionable strategies for navigating the complexities of AI adoption within governmental organisations.
Dr SAKTHIVEL Thangavel S
Director, Solution Architect Office, GovTech SingaporeIn the rapidly evolving landscape of technology, developer platforms are undergoing a significant transformation. This talk explores the future of developer platforms, focusing on the convergence of cloud-native services, resilient architectures, and AI-assisted development. We'll contrast the different needs driving the way we think about these platforms. While the application of Unix-styled small, single-purpose managed cloud services to modern cloud architectures will drive rapid deployment and scaled solutions, the use of Kubernetes ecosystem, with cloud agnostic data stores and networking, will alleviate the concentration risk of single point of cloud failure. Technology aside, we also need to break down silos between development, operations, and security to realize the original devsecops promise. The role of the central platform engineering team aims to simplify the developer experience. To make this change across our organisation, we need to continuously upskill, leverage enabling teams to spread platform-use know-how, and integrate AI as a super-charged assistant throughout the system lifecycle from inception to operations.
Mr Kevin NG
Senior Director, Core Engineering Products, GovTech Singapore
Mr TANG Bing Wan
Director, Core Engineering Products, GovTech SingaporeStackOps Observability Accelerator (SOA) speeds up the process of discovering the resources which are not being monitored in AWS environments leveraging on OpenTelemetry. Once these resources are discovered, configurations will be generated to deploy Elastic Agent which can be used to monitor these resources. These generated configurations massively decrease the time to enable observability across various services in AWS. Also, the discovery data can be used to improve observability by setting up alerts regarding changes in the system status.
Mr Shan MAHANAMA
Senior DevOps Engineer, GovTech SingaporeJoin us for an insider’s look into our adventure with DevConsole as we unveil how we supercharge SGTS Product teams. Discover how we tackled challenges and implemented innovative solutions to deliver faster and smoother experiences with a suite of common services that simplify the discovery, subscription, and management of SGTS Products. Catch a glimpse of how we're transforming complexity into effortless efficiency!
Ms Denise COLLARD
Senior Product Manager, GovTech Singapore
Ms LAM Shi Ling
Senior Software Engineer, GovTech Singapore
Mr TEO Cheng Yong
Lead Software Engineer, GovTech SingaporeGovernment organisations have it tough: they need to deliver to increasingly complex requirements in shorter time frames while reducing risk, effort and cost. While this may well work with mainstream application areas by picking well-established COTS, it still creates skill and maintenance challenges with applicative silos based on different technologies and does not address more niche and innovative needs adequately. Neither does custom development using emerging technologies. What if the Singapore Government could have the best of both worlds: field-proven vertical capabilities and an ability to address bespoke requirements with a common modern technology base featuring three updates a year, enabling to work off a common skill set for a wide variety of applications? Join this session to learn how applying bespoke developer experience in a developer-friendly JavaScript-based Platform, which supports no-code, low-code to pro-code, can achieve capabilities and innovation including data modelling and management, AI, process automation, integration, security and more.
Mr Emmanuel SCHWEITZER
Distinguished Solution Engineer, SalesforceThe Government on Commercial Cloud Plus (GCC+), launched in 2023, is the next-generation cloud hosting environment for Confidential Systems. This session will provide an introduction to GCC+, the services available and how to deploy systems on GCC+. Key Points Covered: 1) Differentiating GPC from GCC+ - Unveiling the enhanced features and pivotal advancements of GCC+ that set it apart from its predecessor. 2) GCC+ Services Roadmap: Pioneering the Future - Charting the roadmap for GCC+ services, revolutionizing the hosting landscape for Confidential systems. 3) Empowering Hosting Models - Showcasing how GCC+ empowers diverse hosting models, revolutionizing the landscape for hosting Confidential systems. This synopsis sets the stage for an impactful 101 session on GCC+.
Mr Julian KAM
Senior Cloud Infrastructure Engineer, GovTech SingaporeIn a microservice architecture - development and testing changes in microservice(s) without affecting stability of shared environments say staging, pre-prod, etc. is challenging. We are excited to share an approach to address it by provisioning a developer environment on demand, which only contains a subset of services that have code changes. Traffic to other services and datastores, which are not in the developer environment, is routed to a shared environment. With this, we can have multiple developer environments running in-parallel sharing the same shared environment - enabling the developer and/or feature development team to have an isolated environment to test out the code changes and rollout with confidence. Further we will share how 3rd party callbacks flows can be baked into the solution. Lastly, we will also cover how tools like, mirrord with enhance the effectiveness and experience further. With a prerequisite of service/application to be containerised, this solution can be adopted and we plan to share live demo as time permits. Overall these solutions and tooling in-practice have improved improving the developer efficiency by 20% while maintaining the stability of shared environments and keeping costs in check.
Mr Ketan MUJUMDAR
Director of Engineering, Carousell Group
Mr Rajath RAMESH
Group Director, Product and Platform Engineering, Carousell GroupIn today's data-driven organisations, efficiently retrieving and utilizing information from vast repositories of meeting notes is a critical challenge. Our team has embarked on implementing Retrieval Augmented Generation (RAG) to transform how users access and utilise meeting information within our organisation. Facing challenges such as diverse data formats and varied user queries, we developed a dynamic RAG system with agentic capabilities. This system leverages large language models (LLMs) to discern user intent, enabling it to execute appropriate actions—such as structured queries for specific data retrieval or summarisation for broader inquiries. Additionally, we employed dynamic chunking to optimise data processing and retrieval. This presentation will delve into the intricacies of our RAG implementation, showcase the innovative solutions our engineers devised, and provide insights for RAG practitioners looking to enhance their own knowledge retrieval systems.
Mr ONG Chew Seng
Senior Software Engineer, Centre for Strategic Infocomm Technologies
Mr Terence TAN
Senior Data Engineer, Centre for Strategic Infocomm TechnologiesDistributed systems create opportunities to improve resilience that are not addressed by traditional approaches to development and testing. To solve these unknowns in distributed systems, chaos engineering was created 11 years ago with the mission to create methodologies and tools that help build a culture of resilience in the presence of unexpected outcomes. This session provides you with an understanding of what chaos engineering is and what it isn't, where it provides value, and how you can create your own chaos engineering program to verify the resilience of your distributed mission-critical systems on AWS.
Mr LEONG Qin Yan
Senior Solutions Architect, Amazon Web ServicesThe rise of internal engineering platforms presents both opportunities and challenges. While platforms can enforce standards, boost efficiency, and optimize cloud usage, their success hinges on more than just features. This talk delves into the critical connection between platform design and developer experience (DevEx). We'll explore how to build platforms that address developer pain points, fostering a state of flow and minimizing distractions. I'll draw on our extensive experience building engineering platforms around the world to identify the practices, tools, and metrics that ensure your platform drives not just efficiency, but buy-in from both developers and executives. Many platform efforts fail because the value was never clearly articulated. I'll show how we model the tangible value the platform delivers, ensuring alignment with business goals and developer needs. This session equips you with a set of practices to maximize the value of your platform. We'll also briefly explore the future of platform engineering, including trends like platform orchestration and large language models. By the end, you'll be ready to tame the platform beast and empower your developers for groundbreaking achievements.
Ms Rachel LAYCOCK
Global Chief Technology Officer, Thoughtworks
Mr GOH Wei Boon
Chief Executive & Government Chief Digital Technology Officer, GovTech SingaporeGitLab has built a unique work experience that unites its global workforce under shared values — collaboration, results for customers, efficiency, diversity, inclusion and belonging, iteration, and transparency. Ashley will share the parallels between the world of software development and GitLab’s community approach and her perspective on what it means to bring an open-source mindset to the workplace. Audience members will learn how to implement a similar community-driven mindset in their own organizations, providing the resources, freedom, and support needed to hire and grow tech talent for innovation to thrive.
Ms Ashley KRAMER
Chief Strategy & Marketing Officer, GitLabThe digital world today runs on open source software. In this talk, Evan will discuss the many different forms of open source and their significance - from enabling better collaboration within organizations to empowering social-economical growth at scale.
Mr Evan YOU
Open Source Developer, Open Source DeveloperIn an era where the software supply chain has become a critical lifeline for organizations across the globe, ensuring its security is no longer a mere option — it's a necessity. This keynote delves into the profound importance of Software Supply Chain Security, exploring how it can be integrated into engineering and developer platforms. We'll examine the role of maturity models in assessing and enhancing security postures and the pivotal function of Software Bill of Materials (SBOMs) in fostering transparency and accountability. The talk will highlight the magnitude of the challenges posed by the software supply chain where most organizations find themselves in the middle of this intricate web. Our reliance on other organizations, open-source communities, and maintainers has never been greater. The keynote will underscore the collective responsibility required to address these challenges, proposing solutions that leverage the power of collaboration, transparency, and shared best practices. By attending, you'll gain actionable insights into safeguarding your software supply chain and contributing to a more secure and resilient ecosystem.
Mr Steve SPRINGETT
Global Board of Directors, OWASP FoundationMr Hunter NIELD
Distinguished Engineer, GovTech SingaporeMs Ashley KRAMER
Chief Strategy & Marketing Officer, GitLabMr Evan YOU
Open Source Developer, Open Source DeveloperMr Steve SPRINGETT
Global Board of Directors, OWASP FoundationBillions spent on cyber security, and we are still falling behind in many ways. The fact is, securing everything is hard. And the unprecedented scale of modern applications, AI workloads, and devices just makes everything harder. Now, imagine you had a security architecture that could understand everything your applications are doing. Then you could have AI define granular segmentation rules for you and keep them updated as things evolve. Imagine you had a way to find vulnerabilities and automatically shield them from being exploited. You’d be protected even before you get the chance to patch. Imagine if your security infrastructure could upgrade itself. You’d save countless hours and eliminate the coordination and downtime of upgrade testing and deployment windows. All this is possible using modern building blocks like eBPF (Enhanced Berkley Packet Filter), hardware acceleration and AI, and we could use these building blocks to deliver a completely new security architecture, not a next-gen of anything to solve the challenges we are dealing with today and setting us up for success tomorrow. This session will cover the current issues and restrictions we are trying to deal with and introduce a new concept for how we could architect a new way of delivering network security by bringing security to the workloads and not the other way around – turning it on its head.
Mr Bradley ANSTIS
Cyber Security Specialist, CiscoFor complex projects, managing multiple Git repositories and pipelines are often essential. However, maintaining observability across these repositories can be challenging, especially when dealing with issues detected during unit testing, vulnerability scans, or other automated quality checks. Limited manpower further complicates the timely identification and resolution of these issues. Our DevSecOps Dashboard streamlines this process by enabling users to quickly identify failed pipelines, code issues and vulnerabilities. With its intutive interface, users can swiftly pinpoint problems, ensuring a more efficient and effective deployment cycle. Deployment of the DevSecOps Dashboard is also straight forward. Simply create a new Gitlab repository within the project’s SHIP/HATS environment, perform minimal configuration, and you’re set! The DevSecOps Dashboard requires no external databases or additional infrastructure, making it a seamless addition to your existing setup.
Mr Chen CHEN
Senior Solution Architect, GovTech Singapore
Mr Vighnesh PRAKASH
Senior Solution Architect, GovTech SingaporeSince 2019, GoBusiness has provided businesses in Singapore with integrated, personalised and seamless access to information and more than 300 digital services from the Singapore Government. It helped business to navigate financial support and regulations during the COVID-19 pandemic and facilitates more than 6 million transactions annually. As the business landscape evolves, how will GoBusiness transform its technical partnerships, architecture and interfaces to continue helping businesses to Start, Run and Grow? Join us to find out how you can play a part in engineering this journey.
Mr Kendrick LEE
Group Chief Information Officer, Ministry of Trade & IndustryLionGuard is a Singapore-contextualised moderation classifier that can serve as a guardrail against unsafe or toxic LLM outputs. It outperforms commercial alternatives on unsafe Singlish content, such as sexual, toxic, or hateful texts. Developed by the AI Practice at GovTech, LionGuard is one of our first technical measures for AI safety and is open-sourced on HuggingFace to encourage wider use. In this lightning talk, we share more about how we developed LionGuard and how your team can start using it to improve safety for your LLM products.
Mr Shaun KHOO
Data Scientist, GovTech SingaporeBest strategies to harness the power of LLMs, with applications to business problems and prompt engineering walk-throughs.
Ms Sheila TEO
Data Scientist, Maritime & Port Authority of SingaporeDip your toes into the secrets of Responsible AI and AI security in just 15 minutes! In an age where AI is reshaping society, understanding the essentials of Responsible AI and AI security is crucial. This lightning talk will highlight the intersection of responsible AI design and robust security measures, showing how to create AI that is both innovative and trustworthy. We’ll cover the principles of Responsible AI, including fairness, transparency, and accountability, and discuss strategies to protect AI systems from cyber threats. While the topic of Responsible AI is vast, today we’ll start this important discussion.
Mr Adarsh JANAKIRAMAN
AI Global Black Belt, MicrosoftLessons from implementing a multi-tenancy solution with IAC.
Mr TANG Chin Yong
Executive Director and Chief Information Officer, Economic Development BoardThis presentation examines a hidden obstacle that impacts the quality of government digital services: confirmation bias. We'll explore how this bias affects both the day-to-day execution of these e-services (micro level) and the bigger-picture decisions around product and policy strategy (macro level). Finally, we'll identify strategies and actionable steps to overcome these biases and build the most effective, people-centric government services.
Ms Lillian SHIEH
Head of Design Practice, GovTech SingaporeOur presentation delves into the innovative integration of Differential Privacy (DP) and Secure Multiparty Computation (MPC) to develop advanced PETs for ad measurement. Our technology tackles the critical challenges of preserving user privacy in advertising by preventing advertisers and publishers from tracking users' activities across platforms. This approach not only safeguards user privacy but also enables valuable ad measurement insights, benefiting both advertisers and publishers.
Dr ZHAO Yongjun
Research Scientist, TikTokJoin us as we delve into the LAUNCH! Programme, an initiative designed to drive innovation in the public sector through collaborative ideathons and hackathons. Discover how LAUNCH! leverages the power of community-driven ideas and partnerships with industry leaders like AWS and Microsoft to develop impactful solutions. We'll showcase success stories, highlight our unique LaunchPad platform, and discuss the journey from ideation to prototyping and beyond.
Mr LIM Hock Chuan
Assistant Director, GovTech SingaporeIn this talk, developers will get introduced to what is Green Software, why is it important for software practitioners and what is software carbon intensity ("SCI"). Developers will get an overview of the work done by Green Software Foundation and how NCS Group is leveraging them to operationalize our SCI measurement and our own framework on tackling this area. "We cannot improve what we cannot measure" - this talk will also clarify the importance of operational efficiency of software run state (compute/storage/networking), measuring them via SCI. Achieving green software is not just about code efficiency and the biggest impact we can make today is review how we operate software in our own environments. Being a nascent field, TeckChun will also conclude with the challenges he sees facing the adoption of Green Software practices and the help we can all give to push the paradigm in a positive direction.
Mr PANG TeckChun
Head, Engineering Excellence, NCS GroupModern software is composed of myriad external dependencies, leading to supply chain risk as the new normal. SBOMs are touted as the solution, but are they enough? Join us for a discussion of the shortfalls of common SBOM generation methods and how we are addressing them to build a non-leaky software supply chain.
Mr Michael SEW
Vice President, SDLC Secure Supply Chain Lead, Goldman Sachs
Mr Richard STEIN
Managing Director, Global Head of Software Development Lifecycle Engineering, Goldman SachsIn this talk, Brian from Primer AI will share their considerations in incorporating AI into software product design. The talk covers UI design considerations, addressing challenges like hallucinations, bias, and output variability when embedding AI into software products as well as touch on UX design patterns for human-AI collaboration.
Mr Brian LIM
Managing Director and APAC General Manager, Primer AIAre you aware that you are in Debt? There are no perfect systems; every system involves a collection of business and technical trade-offs, often resulting in technical debt. Each line of code, each technical implementation or each business requirement can introduce a debt. For example, without error handling a tech debt is created on troubleshoot and visibility on the stability of the code or even extended into operations debt as operations team don’t have the means to be alerted. Technical Debt is not exclusive to software development. The concept of incurring technical debt by choosing short-term gains over long-term sustainability can be seen across various industries and contexts. In outsource projects, technical debt can occur and its opaque or invisible to the customer until delivery time, too late to be resolved, requiring rework or in some cases only uncovered only in production leading to dire consequences such as service disruption and shattered user confidence.However, there is hope. Through meticulous design and thoughtful consideration, it is possible to address technical debt or at least mitigate its potential impact. This session will explore strategies for uncovering debt, common types of technical debt, collection of preventive and mitigation methods collected over the past 20 years employed by various project teams to reduce the likelihood and extent of its impact.
Mr Paul NG
Principal Solution Architect, GovTech SingaporeThe Housing and Development Board (HDB) has been enhancing public transactions through computer systems for 60 years. However, the increasing complexity of applications and interconnected systems has posed challenges in scaling efficiently due to high costs and limitations in adding compute units. To modernise effectively, HDB is leveraging scalable platforms with adaptable operational costs. Agile teams proficient in front-end and back-end development, quality testing, cybersecurity, and DevOps are key. These teams, led by delivery managers skilled in both product development and management, aim to redefine systems with interdependencies into cohesive product frameworks within Enterprise Architecture. Cloud-based solutions offer scalability and reduce maintenance overheads with managed services, shifting from capital expenditure (CapEx) to operational expenditure (OpEx) for tailored solution experimentation. In addition, leveraging on cloud technology advancements enable load testing without resource constraints, as the cloud dynamically scales to meet demand, while offloading patching and maintenance accelerates value delivery. The adoption of DevSecOps and CI/CD practices has revolutionised HDB's software development lifecycle, enhancing speed, efficiency, and security. This unified approach fosters a culture of collective ownership and accountability across development, operations, and security teams. Cross-functional product teams facilitate holistic product development, ensuring cohesive and impactful outcomes. Introducing multiple Scrum teams has emphasized agility, adaptability, and collaboration. Each team operates autonomously, enabling rapid iteration and incremental value delivery. Implementing the Strangler Pattern strategically modernises systems, minimising risk, maintaining service continuity, and seamlessly integrating new technologies. This presentation outlines HDB's transformative journey, addressing challenges in system modernisation and integration of DevSecOps, CI/CD, and agile practices. Explore insights into adopting multiple Scrum teams and strategically implementing the Strangler Pattern for effective modernisation.
Mr CHEN Xuanyi
Senior Software Engineer / Tech Lead (AST1), Housing & Development Board
Mr Joe TAN
Senior Software Engineer, Housing & Development Board
Mr YIU Zhen Ye Tommy
Technical Product Manager, Housing & Development BoardLessons learnt in the journey of building IAM solution for government services.
Ms YOU Yilun
Senior Software Engineer, GovTech Singapore
Mr TAN Yong Zhi
Software Engineer, GovTech SingaporeAt the center of every high performing organization lies a singular force driving actions, fueling motivations, and propelling towards results: culture. Great culture is a near unstoppable force and at the core of every culture lies a system of values and beliefs. When strong values are merged with great culture, the result is an organization with a formidable ability to innovate and disrupt any space it directs its attention to. The key to mastering collaborative product building as an organization starts with culture. In this talk, Corey Lee (Designer Advocate, Figma) shares how to create awareness of the value of using cross-functional collaboration within an organization while providing practical, actionable tips for implementing collaborative culture at scale.
Mr Corey LEE
Designer Advocate, FigmaTesting microservice changes from feature branches early & easily in a synthetic yet production-like integration environment gives software teams the confidence to merge & release quickly. However, it is expensive for Platform teams to provision & maintain multiple such environments. So, most organisations typically have one shared Staging/Pre-production environment. The shared nature of these environments however, causes a lot of challenges for developers & application testers alike. Developer velocity is impeded by the need for manual coordination around service deployments. Bad deployments from unstable branches, on the other hand, can affect the stability of the environment which impacts testers. Service meshes provide powerful traffic routing features to support request-level multi-tenancy in a single shared environment. In this talk, we'll see how this core idea can be extended with support tooling & automation to build an inexpensive yet first-class developer experience for effective micro-service testing.
Mr Amarnath RAVIKUMAR
Principal Software Engineer, XenditSharing on the insight on DPE (Developer Productivity Engineering Team) approach to extract and decide on the right metric to drive impactful decisions to improve developer productivity and experience. Audience can expect to learn more on various techniques and solutions could be used to achieve the objectives.
Mr Hudson LEE
Principal DevOps Engineer, GovTech SingaporeThis talk discusses how a good developer experience (design system, scaffolding tools, tech standards, ...), combined with the right organisational structures and operating model, a lean team composition with a focus on autonomy, and an organisation that measures individual impact can lead to high performing teams with exceptional productivity.
Mr Aiko KLOSTERMANN
Technical Lead / Engineering Manager, Open Government ProductsWith so many tools out there, there has to be a better way to streamline how privileged ID is being release, access and monitor activity logging. Improving how we review activity logs with high accuracy and efficiency.
Mr Vincent CHONG
Deputy Director (TL), Monetary Authority of SingaporeIn today's fast-paced tech landscape, charting a successful career path requires more than just technical skills. Join me for an inspiring session where we'll explore the principles behind the TalentTech ecosystem at Thoughtworks, focusing on how you can strategically enhance your capabilities and career development. From understanding the broader business vision and industry trends to identifying your unique strengths and motivations, this talk will provide actionable insights on how to plan your growth. Learn how to invest your time in building essential skills, demonstrate your value in day-to-day work, and seize opportunities to make your mark. Whether you're a software engineer, UX designer, or project manager, this session will equip you with the tools and mindset needed to connect the dots and elevate your career in a tech organization.
Ms Jessie XIA
Global Chief Information Officer, ThoughtworksCheckMate is a ground-up, fully volunteer-run initiative to tackle misinformation and scams. It was started a year ago, and the product created is a WhatsApp bot, that allows anyone to forward/send in dubious content that they encounter online. Behind the scenes, a blend of AI, GenAI and crowdsourcing is used to check the message and respond to the sender.
Mr TAN Bing Wen
Founder, CheckMateAfter Solarwinds and Log4j, governments are pressing CEOs for secure software development. Regulations like EU Cyber Resilience Act, NIS2, BSI, DORA, ISO 21434 demand action for better software security. This talk examines these regulations, compliance, and their effect on open source development.
Mr Ilkka TURUNEN
Field Chief Technology Officer, SonatypeThe invention of the Transformer architecture in the seminal paper *Attention is All You Need* has catalyzed the exciting momentum we are seeing today in Generative AI. Generative AI has enabled many innovative applications, which are fundamentally changing the way we learn, work and play. This creates opportunities for everyone, and for every industry. A key ingredient to training large (and small) language models is data. Data fuels AI, and it is important for every organization to have a holistic Data and AI strategy, building on a strong data foundation, that will meet the organization's AI needs. Using practical examples, you will get up to speed on the *unreasonable effectiveness* of Data and Generative AI. This talk brings you on an exciting journey on the past, present, and future of Generative AI, sharing best practices on translating Data and AI strategy to concrete outcomes that matter. Most importantly, you will learn how we can all get started today!
Dr TOK Wee Hyong
Partner Director of Products, Cloud and AI Organisation, MicrosoftToday, organizations have a wide range of FM options to power their generative AI applications. To achieve the right balance of accuracy and performance for their use case, organizations must continuously evaluate models and find the most optimum option based on their preferred metrics. In this hands-on workshop, you will: 1. Understand the importance of LLM evaluation for application builders 2. Explore the challenges and important considerations of holistic evaluation 3. Get hands-on with tools and techniques across human and automated evaluation 4. Learn how to optimize LLM-based solutions by selecting better models, prompt templates & inference configurations
Mr Vincent OH
Senior Specialist Solutions Architect (GenAI & Innovation), Amazon Web ServicesAre you new to containers? If so, this workshop is for you! In this workshop, you’ll learn about the basics of containers, how to build container images, how to distribute them, and how to run them anywhere you have a container engine (in the cloud or on-prem)! Along the way, you’ll be introduced to various best practices to ensure your containers are small and secure, and enable you to develop and deploy applications quickly and at scale! Plus, you'll learn how to spin up mock cloud services locally within containers, enabling efficient and isolated testing without complex external setups.
Mr Ajeet RAINA
Solution Architect, Docker, IncThis workshop aims to educate users that face data privacy challenges on privacy technologies that they can potentially use. The workshop will cover a range of technologies from the most established (anonymisation) to the more advanced (e.g., synthetic data generation, homomorphic encryption, differential privacy). The workshop will cover basic theory, and available tools/ our experience with government use cases where possible. Workshop Agenda: • Introduction to Privacy Enhancing Technologies (30min) • Anonymisation: How to assess re-identification risk and LLM-based approaches for Free-Text Anonymisation (45min) • Break and Q&A (15min) • Synthetic Data Generation (1h) • Homomorphic Encryption and Searchable Symmetric Encryption (15min) • Q&A (15min)
Ms Judy HONG
Product Manager, GovTech Singapore
Mr Syahri IKRAM
Data Engineer, GovTech Singapore
Ms Anshu SINGH
Privacy Research Engineer, GovTech Singapore
Mr James TEO
Data Engineer, GovTech Singapore
Ms Nicole REN
Data Engineer, GovTech SingaporeThis workshop will take folks on a learning adventure of how software engineers in GovTech use Automated Testing in building high-quality software products for public good. Attendees will be introduced to the different layers of the Testing Pyramid and the tools that software engineers in GovTech use to support that layer of automated testing. Attendees will also be given a number of self-paced hands-on labs to have a taster on the different kind of testing tools available: 1. Creating a unit test. 2. Creating an integration test. 3. Creating an end-to-end test. 4. Using ChatGPT prompts to build something. 5. Building a Continuous Integration pipeline.
Mr Michael CHENG
Principal Software Engineer, GovTech SingaporeThis is a hands-on workshop with the aim of helping attendees experience the agility and speed to deploy applications in GCC using the ORCA Tech Stack. The topics that will be covered are: - [INFO] A walk through of the microservices landing-zone design what is used to deploy most e-services workloads in GCC - [INFO] Navigation and familiarisation of the ORCA Innersource repository - [HANDS ON] Setting and explanation of the infrastructure and application runner - [HANDS ON] Microservices landing zone deployment - [DEMO] Deploying and testing with our integration app NeoN using our CI/CD Golden Path -[INFO] How you can contribute as a developer in ORCA for Azure and AWS
Mr Terence Sangeet ANTHONY MOHAN
Head, Cloud Platform Engineering, xCloud, Home Team Science & Technology Agencyoin us for an immersive workshop on supercharging design to code. This session will explore how to streamline the design-to-development workflow using Dev Mode and Code Connect. Discover powerful features and best practices to bridge the gap between design and code, reducing friction and enhancing collaboration. Whether you're refining your handoff process or looking to level up your team's efficiency, this workshop offers the tools and insights to make it happen.
Mr Yanwen WANG
Enterprise Solutions Consultant, Figma
Ms Chanelle HSU
Solutions Consultant, FigmaIn response to the growing need for inclusive environments in the tech industry, we propose a workshop dedicated to building allyship among tech professionals. This workshop aims to foster a culture of support and collaboration by educating participants on the importance of diversity and inclusion, understanding different perspectives, and providing practical strategies for effective allyship. By equipping attendees with the tools to recognize and challenge biases, advocate for marginalized groups, and promote equitable practices, we can create a more inclusive and innovative tech community. The workshop will feature interactive sessions and real-world scenarios to ensure participants leave with actionable insights and a commitment to driving positive change in their workplaces.
Ms Pauline GAN
Senior Consultant and Facilitator, CatalyseNeed a product info page for your POC/POV? With Optical, anyone can quickly build a government-trusted and secure website. In this workshop, you will design, build, and publish a basic website. We will provide you with step-by-step instructions, tips and tools that enable you to create an attractive layout for your pages, organise your content and ensure that your site functions well before launching it to the public. No technical experience is required. For queries about this workshop, please email Stack@tech.gov.sg.
Ms Samantha WONG
Senior Software Engineer, GovTech Singapore
Mr Jaegar POON
Software Engineer, GovTech SingaporeThis workshop provides engineers with practical guidance on implementing Infrastructure as Code practices within their teams, addressing challenges like remote state management, collaborative repository structures, testing, and cultural considerations when using Terraform.
Mr Darryl SW
Senior DevOps Engineer, GovTech SingaporeThis comprehensive workshop covers a detailed code walkthrough of building an AI agent from scratch and deploying it to production. We'll cover key concepts like RAG, and explore the design process for agents, including planning, tool design, handling agent communication, memory, evaluation, testing and observability. Attendees will get hands-on experience with both code and no-code tools to build and deploy AI agents to production using open source frameworks like LangChain and Cloud Platform tools like Vertex AI.
Ms Akshata MOHANTY
Founder, KeistIn the fast-paced digital world, web performance has become a critical factor in delivering seamless user experiences and driving business success. This workshop equips you with essential strategies and techniques to optimise website and application performance, ensuring lightning-fast load times and responsive interactions across devices. From asset optimisation to performance monitoring and leveraging modern technologies, you will gain practical insights to enhance user satisfaction, boost conversions, and stay ahead of the competition. In this workshop, you will learn: - Modern optimisation techniques for the frontend - The ins and outs of Core Web Vitals and how to optimise for them - Performance measurement tools - Image and video optimisation at scale
Mr Tamas PIROS
Director of Developer Advocacy, CloudinaryCatch It If You Can is an immersive event to test and hone your skills in production operations. After a brief introduction to Elastic Observability, participants will troubleshoot live production issues in a realistic micro-service application using Elastic Observability.
Mr LIM Jie-Hong
Solutions Architect, ElasticsearchThis workshop will cover two main topics: Topic 1: Introduction to the Zero Trust Security Model Description: Demonstrates how developers can integrate Zero Trust concepts into application development. Topic 2: Hands-on lab to explore Zero Tarust principles Description : How the principles can be applied to secure access to development environments, implement scalable and automated guardrails around the CI/CD pipeline, and leverage built-in security controls on developer-centric platforms.
Mr Jeremy JORROT
SASE Specialist, Cloudflare
Mr Edwin WONG
Specialist Solutions Engineer, Cloudflare
Ms Claire LIM
Solutions Engineer, CloudflareLast year was about everything AI. That interest is expected to only grow in 2024 as organizations look to innovate to meet rising customer needs. In the quest to build efficient, optimized workflows and stay ahead of competitors, organizations are looking for AI enhancements across the software development lifecycle. Join us as we delve into how we are leveraging advanced AI capabilities to enhance the workflows of developers, project managers, security and platform engineers in this workshop. We will explore our approach to Generative AI and provide hands-on experience with features such as Code Suggestions, and Summarize/Resolve this Vulnerability, etc.
Mr Zane J. CHUA
Senior Customer Success Architect, GitlabExplore the GoWhere Suite and discover how it empowers government agencies to create, manage, and publish their own GoWhere sites with ease. In this interactive, hands-on session, you’ll work directly with DIYGoWhere and discover how it can enhance campaign awareness, engagement, and reach. For queries about this workshop, please email Stack@tech.gov.sg.
Mr Joshua CHAN
Delivery Manager, GovTech Singapore