DevSecOps Engineer

Company Overview

Vinova is an award-winning development company specializing in mobile, web, and enterprise applications worldwide. We deliver quality, flexible, and fast solutions in IoT, blockchain, fintech, networking, and ecommerce, fostering a collaborative and innovative work environment.

Job Summary

Design, implement, and maintain secure CI/CD pipelines integrating security and quality tools to automate application build, testing, and deployment. Support containerized deployments and standardize DevSecOps practices across applications.

Responsibilities

• Design and maintain secure CI/CD pipelines using GitLab and SHIP-HATS, managing runners, branching, merge controls, and access rights to ensure robust deployment workflows
• Integrate Fortify, Nexus IQ, and SonarQube tools into CI/CD pipelines to enforce security and code quality gates effectively
• Apply shift-left security practices throughout the software development lifecycle to identify and mitigate vulnerabilities early in code, dependencies, containers, and deployments
• Automate application build, testing, security scanning, and deployment processes across development and production environments to enhance efficiency and reliability
• Support containerized application deployment using Docker and Kubernetes/EKS to ensure scalable and consistent environments
• Manage pipeline credentials, secrets, and service accounts securely to protect sensitive information and maintain compliance
• Develop reusable pipeline templates and standardize DevSecOps practices across AE applications to promote consistency and best practices
• Troubleshoot pipeline, security scanning, and deployment issues, collaborating with developers to resolve findings and improve pipeline stability

Required competencies and certifications

• Hands-on experience with GitLab CI/CD
• Good understanding of SDLC, DevSecOps, and shift-left security principles
• Experience integrating application security and code-quality tools, preferably Fortify, Nexus IQ, and SonarQube
• Experience with Git, Docker, and Kubernetes
• Scripting skills using Python, Bash, PowerShell, or equivalent
• Working knowledge of Linux, networking, access control, and secrets management

Preferred competencies and qualifications

• Hands-on experience with SHIP-HATS
• Experience with Infrastructure as Code tools such as Terraform, Ansible, or AWS CloudFormation
• Experience with Helm and Argo CD