DevSecOps Engineer

Company Overview

Vinova is an award-winning development company specializing in mobile, web, and enterprise applications. Since 2010, we serve global clients across IoT, blockchain, fintech, networking, and ecommerce, delivering quality, flexible, and fast solutions in a collaborative environment.

Job Summary

You will design and implement secure, cloud-native infrastructure on AWS, integrating DevSecOps practices and supporting production environments. This role involves mentoring engineers, ensuring compliance, and driving secure infrastructure standards.

Responsibilities

• Set up modern cloud-native, containerized infrastructure on AWS using Infrastructure as Code (e.g., Terraform), including VPC networking, EKS/ECS, RDS, and container registry across development, staging, and production environments
• Apply cloud security controls such as least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit
• Integrate security into development pipelines by implementing SAST, dependency, secret, container image, and IaC scanning in GitLab CI/CD with defined pass/fail gates
• Configure and maintain monitoring, alerting, and observability using tools like Dynatrace or Datadog
• Support production deployments and resolve incidents by creating and maintaining runbooks
• Design, implement, and regularly test backup and restore procedures to ensure data integrity and availability
• Integrate infrastructure with identity and access management systems such as ADFS, WOG AD, SAML, OIDC, and CAM
• Define secured infrastructure architecture and establish security baselines for the platform
• Develop and enforce secure infrastructure standards, guardrails, and best practices across the engineering team
• Provide guidance and mentorship to engineers on secure infrastructure and DevSecOps methodologies
• Collaborate with agency security teams to conduct security reviews, meet compliance requirements, and remediate findings
• For Senior Consultant: Lead secure cloud architecture design and DevSecOps implementation, influencing engineering teams and communicating security trade-offs to stakeholders

Required competencies and certifications

• Hands-on experience setting up AWS cloud infrastructure
• Proficiency in Infrastructure as Code tools, specifically Terraform or equivalent
• Practical experience with container technologies including Docker and Kubernetes (EKS)
• Experience configuring and managing CI/CD pipelines
• Knowledge and application of application and infrastructure security practices
• Experience using security scanning tools for code, dependencies, containers, and infrastructure
• Familiarity with observability tools and production operations support
• Consultant level: 3–5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience
• Senior Consultant level: 7+ years of experience including 2–3 years leading secure cloud architecture or DevSecOps initiatives

Preferred competencies and qualifications

• Experience with Singapore Government or public sector security and compliance requirements
• Familiarity with observability tools such as Dynatrace and Datadog
• Experience building, containerizing, and deploying applications in Golang, Kotlin, Next.js/TypeScript
• Knowledge of operating workflow engines like Temporal on Kubernetes
• Experience with identity management systems including ADFS, WOG AD, SAML, OIDC, CAM (GovTech Central Accounts Management)
• Familiarity with Trend Micro FAM and other infrastructure/container security tools
• Exposure to OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle

Other Information

• Security-first mindset with a practical, delivery-focused approach
• Strong documentation and communication skills
• Senior Consultant: ability to influence engineering teams and explain security trade-offs to stakeholders

Skills

Security Architecture, RDS, Backup Procedures, SAML, Design, Terraform, Oracle Alerts, Datadog, ADFS, Staging, Cloud Infrastructure, Identity & Access Management, Secure Software Development Lifecycle (SSDLC), Production Deployment, ECS, Encryption