DevSecOps Engineer

Company Overview

Vinova is an award-winning development company specializing in mobile, web, and enterprise applications. Since 2010, it has delivered quality solutions globally across IoT, blockchain, fintech, networking, and ecommerce, fostering innovation through close client collaboration.

Job Summary

You will design, maintain, and optimize CI/CD pipelines and support cloud operations to ensure secure, reliable, and efficient software delivery. Collaborate with cross-functional teams to enhance automation, security, and operational monitoring in a dynamic environment.

Responsibilities

• Design, maintain, and optimize CI/CD pipelines using GitLab CI/CD and SHIP-HATS across development, UAT, staging, and production environments to ensure smooth software delivery
• Implement secure deployment automation including approval workflows, quality gates, audit trails, rollback procedures, and release controls to maintain compliance and reliability
• Support cloud operations across AWS and GCC environments by configuring infrastructure, managing environments, monitoring operations, and providing production support
• Develop and maintain automation scripts, reusable pipeline templates, operational runbooks, and deployment standards to improve consistency and reduce manual effort
• Integrate security controls into CI/CD pipelines by performing vulnerability scanning, dependency checks, secrets management, code quality validation, and compliance checks
• Monitor application, infrastructure, and pipeline health using enterprise monitoring tools, dashboards, alerts, and log analysis to proactively identify issues
• Support release management activities and coordinate deployment planning with development, infrastructure, security, and operations teams to ensure smooth releases
• Conduct root cause analysis for deployment, pipeline, application, infrastructure, and cloud-related incidents and drive corrective and preventive actions to improve system stability
• Execute configuration and infrastructure changes through established change management processes with proper documentation and risk controls to maintain system integrity
• Maintain access controls and conduct regular access reviews across DevOps platforms, repositories, cloud environments, and deployment tools to ensure security compliance
• Support vulnerability management, audit requests, security compliance reviews, and remediation tracking in accordance with government requirements

Required competencies and certifications

• Degree in Computer Science, Software Engineering, or a relevant IT field
• Minimum 3 years of experience in DevOps, platform engineering, systems engineering, or cloud operations
• Hands-on experience with GitLab CI/CD pipelines
• Experience with SHIP-HATS or similar DevSecOps delivery platforms
• Proficient in monitoring tools, log analytics platforms, alerting frameworks, and incident investigation techniques
• Strong working knowledge of AWS cloud services
• Strong knowledge of Infrastructure-as-Code tools such as Terraform, Bicep, or CloudFormation
• Ability to work independently, manage multiple priorities, and provide technical guidance
• Strong communication and documentation skills

Preferred competencies and qualifications

• Prior experience working on Singapore Government projects or within a public sector agency