DevSecOps Engineer

Company Overview

Vinova is an award-winning development company specializing in mobile, web, and enterprise applications worldwide. We deliver quality, flexible, and fast solutions in IoT, blockchain, fintech, networking, and ecommerce, fostering a collaborative and innovative work environment.

Job Summary

Design, implement, and maintain secure CI/CD pipelines integrating security and quality tools to automate application build, testing, and deployment. Support containerized deployments and standardize DevSecOps practices across applications.

Responsibilities

Design and maintain secure CI/CD pipelines using GitLab and SHIP-HATS, managing runners, branching, merge controls, and access rights to ensure robust deployment workflows

Integrate Fortify, Nexus IQ, and SonarQube tools into CI/CD pipelines to enforce security and code quality gates effectively

Apply shift-left security practices throughout the software development lifecycle to identify and mitigate vulnerabilities early in code, dependencies, containers, and deployments

Automate application build, testing, security scanning, and deployment processes across development and production environments to enhance efficiency and reliability

Support containerized application deployment using Docker and Kubernetes/EKS to ensure scalable and consistent environments

Manage pipeline credentials, secrets, and service accounts securely to protect sensitive information and maintain compliance

Develop reusable pipeline templates and standardize DevSecOps practices across AE applications to promote consistency and best practices

Troubleshoot pipeline, security scanning, and deployment issues, collaborating with developers to resolve findings and improve pipeline stability

Required competencies and certifications

Hands-on experience with GitLab CI/CD

Good understanding of SDLC, DevSecOps, and shift-left security principles

Experience integrating application security and code-quality tools, preferably Fortify, Nexus IQ, and SonarQube

Experience with Git, Docker, and Kubernetes

Scripting skills using Python, Bash, PowerShell, or equivalent

Working knowledge of Linux, networking, access control, and secrets management

Preferred competencies and qualifications

Hands-on experience with SHIP-HATS

Experience with Infrastructure as Code tools such as Terraform, Ansible, or AWS CloudFormation

Experience with Helm and Argo CD