DevSecOps Engineer

Company Overview Vinova is an award-winning development company specializing in mobile, web, and enterprise applications. Since 2010, we serve global clients across IoT, blockchain, fintech, networking, and ecommerce, delivering quality, flexible, and fast solutions in a collaborative environment. Job Summary You will design and implement secure, cloud-native infrastructure on AWS, integrating DevSecOps practices and supporting production environments. This role involves mentoring engineers, ensuring compliance, and driving secure infrastructure standards. Responsibilities • Set up modern cloud-native, containerized infrastructure on AWS using Infrastructure as Code (e.g., Terraform), including VPC networking, EKS/ECS, RDS, and container registry across development, staging, and production environments • Apply cloud security controls such as least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit • Integrate security into development pipelines by implementing SAST, dependency, secret, container image, and IaC scanning in GitLab CI/CD with defined pass/fail gates • Configure and maintain monitoring, alerting, and observability using tools like Dynatrace or Datadog • Support production deployments and resolve incidents by creating and maintaining runbooks • Design, implement, and regularly test backup and restore procedures to ensure data integrity and availability • Integrate infrastructure with identity and access management systems such as ADFS, WOG AD, SAML, OIDC, and CAM • Define secured infrastructure architecture and establish security baselines for the platform • Develop and enforce secure infrastructure standards, guardrails, and best practices across the engineering team • Provide guidance and mentorship to engineers on secure infrastructure and DevSecOps methodologies • Collaborate with agency security teams to conduct security reviews, meet compliance requirements, and remediate findings • For Senior Consultant: Lead secure cloud architecture design and DevSecOps implementation, influencing engineering teams and communicating security trade-offs to stakeholders Required competencies and certifications • Hands-on experience setting up AWS cloud infrastructure • Proficiency in Infrastructure as Code tools, specifically Terraform or equivalent • Practical experience with container technologies including Docker and Kubernetes (EKS) • Experience configuring and managing CI/CD pipelines • Knowledge and application of application and infrastructure security practices • Experience using security scanning tools for code, dependencies, containers, and infrastructure • Familiarity with observability tools and production operations support • Consultant level: 3–5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience • Senior Consultant level: 7+ years of experience including 2–3 years leading secure cloud architecture or DevSecOps initiatives Preferred competencies and qualifications • Experience with Singapore Government or public sector security and compliance requirements • Familiarity with observability tools such as Dynatrace and Datadog • Experience building, containerizing, and deploying applications in Golang, Kotlin, Next.js/TypeScript • Knowledge of operating workflow engines like Temporal on Kubernetes • Experience with identity management systems including ADFS, WOG AD, SAML, OIDC, CAM (GovTech Central Accounts Management) • Familiarity with Trend Micro FAM and other infrastructure/container security tools • Exposure to OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle Other Information • Security-first mindset with a practical, delivery-focused approach • Strong documentation and communication skills • Senior Consultant: ability to influence engineering teams and explain security trade-offs to stakeholders