DevSecOps Engineer

Company Overview

Vinova is an award-winning development company specializing in mobile, web, and enterprise applications. Since 2010, we serve global clients across IoT, blockchain, fintech, and ecommerce, delivering quality, flexible, and fast solutions through passionate collaboration.

Job Summary

You will lead the management and scaling of AWS cloud environments and production-grade Kubernetes on AWS EKS, ensuring secure, reliable, and compliant infrastructure operations aligned with stringent regulatory requirements.

Responsibilities

Manage and scale AWS cloud environments, taking full ownership of Kubernetes cluster architecture, workload deployment, security, upgrades, autoscaling, resilience, observability, and incident troubleshooting on AWS EKS

Provision, configure, and administer AWS services including RDS PostgreSQL, OpenSearch, Bedrock AI services, and ELB to support application needs

Design, operate, and troubleshoot secure AWS network architectures in regulated, multi-account environments, applying network segmentation, least-privilege principles, and connectivity solutions such as VPN and Direct Connect

Establish and maintain service-level indicators and objectives, dashboards, alerts, logs, metrics, and distributed traces for infrastructure, Kubernetes, applications, and AI workloads

Lead incident response, root-cause analysis, corrective actions, capacity planning, backup and restore testing, and disaster-recovery exercises to meet recovery objectives

Use Terraform to provision and manage repeatable AWS and Kubernetes environments as Infrastructure as Code

Administer and optimize GitLab CI/CD pipelines with automated testing, security scans (SAST, DAST), policy enforcement, approval controls, rollback mechanisms, and auditable release records

Embed security controls throughout the platform lifecycle, including threat modeling, secure architecture reviews, vulnerability and patch management, penetration testing, remediation tracking, audit evidence, and technical risk assessments

Collaborate with cybersecurity, governance, product, and project teams to translate government security requirements and enterprise standards into automated, testable controls

Implement least-privilege IAM, workload identity, privileged-access controls, secrets and certificate management, container image signing and scanning, software bills of materials, dependency governance, and policy enforcement across infrastructure and deployment pipelines

Protect sensitive configurations and credentials while maintaining traceability of changes and releases

Collaborate with external vendors to map current architecture, reverse-engineer undocumented configurations, and transition infrastructure operations fully in-house

Required competencies and certifications

Hands-on experience in DevOps, DevSecOps, Cloud Engineering, or similar roles with 2 to 5+ years of relevant production experience

Proficiency with Kubernetes and Terraform in production environments

Strong expertise in AWS infrastructure, including AWS EKS and Kubernetes networking

Deep knowledge of complex AWS networking in multi-account and regulated environments

Experience building and maintaining CI/CD pipelines

Proven ability to define service-level objectives, build monitoring and alerting systems, respond to production incidents, conduct root-cause analysis, manage capacity, and design/test backup, restore, and disaster-recovery plans

Experience delivering or operating systems under Singapore Government Commercial Cloud and IM8 requirements or similarly stringent regulatory frameworks

Preferred competencies and qualifications

Significant hands-on experience deploying and operating agentic AI workloads

Familiarity with production AI and machine-learning workloads