DevSecOps Engineer

Company Overview

Vinova is an award-winning development company specializing in mobile, web, and enterprise applications. Since 2010, it has delivered quality solutions globally across IoT, blockchain, fintech, networking, and ecommerce, fostering innovation through close client collaboration.

Job Summary

You will design, maintain, and optimize CI/CD pipelines and support cloud operations to ensure secure, reliable, and efficient software delivery. Collaborate with cross-functional teams to enhance automation, security, and operational monitoring in a dynamic environment.

Responsibilities

Design, maintain, and optimize CI/CD pipelines using GitLab CI/CD and SHIP-HATS across development, UAT, staging, and production environments to ensure smooth software delivery

Implement secure deployment automation including approval workflows, quality gates, audit trails, rollback procedures, and release controls to maintain compliance and reliability

Support cloud operations across AWS and GCC environments by configuring infrastructure, managing environments, monitoring operations, and providing production support

Develop and maintain automation scripts, reusable pipeline templates, operational runbooks, and deployment standards to improve consistency and reduce manual effort

Integrate security controls into CI/CD pipelines by performing vulnerability scanning, dependency checks, secrets management, code quality validation, and compliance checks

Monitor application, infrastructure, and pipeline health using enterprise monitoring tools, dashboards, alerts, and log analysis to proactively identify issues

Support release management activities and coordinate deployment planning with development, infrastructure, security, and operations teams to ensure smooth releases

Conduct root cause analysis for deployment, pipeline, application, infrastructure, and cloud-related incidents and drive corrective and preventive actions to improve system stability

Execute configuration and infrastructure changes through established change management processes with proper documentation and risk controls to maintain system integrity

Maintain access controls and conduct regular access reviews across DevOps platforms, repositories, cloud environments, and deployment tools to ensure security compliance

Support vulnerability management, audit requests, security compliance reviews, and remediation tracking in accordance with government requirements

Required competencies and certifications

Degree in Computer Science, Software Engineering, or a relevant IT field

Minimum 3 years of experience in DevOps, platform engineering, systems engineering, or cloud operations

Hands-on experience with GitLab CI/CD pipelines

Experience with SHIP-HATS or similar DevSecOps delivery platforms

Proficient in monitoring tools, log analytics platforms, alerting frameworks, and incident investigation techniques

Strong working knowledge of AWS cloud services

Strong knowledge of Infrastructure-as-Code tools such as Terraform, Bicep, or CloudFormation

Ability to work independently, manage multiple priorities, and provide technical guidance

Strong communication and documentation skills

Preferred competencies and qualifications

Prior experience working on Singapore Government projects or within a public sector agency