{"id":3664416,"url":"https://alion.io/job/vinova-devsecops-engineer-2","title":"DevSecOps Engineer","company":{"id":175396,"name":"Vinova","domain":"vinova.sg","url":"https://alion.io/company/vinova","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":9800,"max":9800,"currency":"SGD","period":"month","gross":true,"usd_annual":91956},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Datadog","optional":false},{"name":"Docker","optional":false},{"name":"Dynatrace","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Kotlin","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Next.js","optional":false},{"name":"Terraform","optional":false},{"name":"Trend Micro","optional":false},{"name":"JavaScript","optional":true},{"name":"React.js","optional":true}],"status":"live","first_seen_at":"2026-11-03T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-11-03T00:00:00Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"Company Overview\nVinova is an award-winning development company specializing in mobile, web, and enterprise applications. Since 2010, we serve global clients across IoT, blockchain, fintech, networking, and ecommerce, delivering quality, flexible, and fast solutions in a collaborative environment.\nJob Summary\nYou will design and implement secure, cloud-native infrastructure on AWS, integrating DevSecOps practices and supporting production environments. This role involves mentoring engineers, ensuring compliance, and driving secure infrastructure standards.\nResponsibilities\nSet up modern cloud-native, containerized infrastructure on AWS using Infrastructure as Code (e.g., Terraform), including VPC networking, EKS/ECS, RDS, and container registry across development, staging, and production environments\nApply cloud security controls such as least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit\nIntegrate security into development pipelines by implementing SAST, dependency, secret, container image, and IaC scanning in GitLab CI/CD with defined pass/fail gates\nConfigure and maintain monitoring, alerting, and observability using tools like Dynatrace or Datadog\nSupport production deployments and resolve incidents by creating and maintaining runbooks\nDesign, implement, and regularly test backup and restore procedures to ensure data integrity and availability\nIntegrate infrastructure with identity and access management systems such as ADFS, WOG AD, SAML, OIDC, and CAM\nDefine secured infrastructure architecture and establish security baselines for the platform\nDevelop and enforce secure infrastructure standards, guardrails, and best practices across the engineering team\nProvide guidance and mentorship to engineers on secure infrastructure and DevSecOps methodologies\nCollaborate with agency security teams to conduct security reviews, meet compliance requirements, and remediate findings\nFor Senior Consultant: Lead secure cloud architecture design and DevSecOps implementation, influencing engineering teams and communicating security trade-offs to stakeholders\nRequired competencies and certifications\nHands-on experience setting up AWS cloud infrastructure\nProficiency in Infrastructure as Code tools, specifically Terraform or equivalent\nPractical experience with container technologies including Docker and Kubernetes (EKS)\nExperience configuring and managing CI/CD pipelines\nKnowledge and application of application and infrastructure security practices\nExperience using security scanning tools for code, dependencies, containers, and infrastructure\nFamiliarity with observability tools and production operations support\nConsultant level: 3–5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience\nSenior Consultant level: 7+ years of experience including 2–3 years leading secure cloud architecture or DevSecOps initiatives\nPreferred competencies and qualifications\nExperience with Singapore Government or public sector security and compliance requirements\nFamiliarity with observability tools such as Dynatrace and Datadog\nExperience building, containerizing, and deploying applications in Golang, Kotlin, Next.js/TypeScript\nKnowledge of operating workflow engines like Temporal on Kubernetes\nExperience with identity management systems including ADFS, WOG AD, SAML, OIDC, CAM (GovTech Central Accounts Management)\nFamiliarity with Trend Micro FAM and other infrastructure/container security tools\nExposure to OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle\nOther Information\nSecurity-first mindset with a practical, delivery-focused approach\nStrong documentation and communication skills\nSenior Consultant: ability to influence engineering teams and explain security trade-offs to stakeholders\nSkills\nSecurity Architecture, RDS, Backup Procedures, SAML, Design, Terraform, Oracle Alerts, Datadog, ADFS, Staging, Cloud Infrastructure, Identity & Access Management, Secure Software Development Lifecycle (SSDLC), Production Deployment, ECS, Encryption","description_format":"text","description_chars":4144,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Mobile App Development Services","Web Development Services","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-03T04:28:15Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":30,"reasons":["seen:3","velocity","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":91956,"is_top_pay":false},"html_url":"https://alion.io/job/vinova-devsecops-engineer-2","json_url":"https://alion.io/job/vinova-devsecops-engineer-2.json","meta":{"generated_at":"2026-11-07T00:29:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1207,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175396},"rest":"https://alion.io/mcp/rest/get_company?id=175396"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvinova-devsecops-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvinova-devsecops-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvinova-devsecops-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vinova-devsecops-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvinova-devsecops-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3664416}},{"tool":"search_jobs","arguments":{"company":"vinova.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3664416},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}