DevSecOps Engineer

Qualifications

· At least 5 years in software / infrastructure engineering, including 3+ years hands-on in DevSecOps, cloud engineering, or SRE. Demonstrated experience owning infrastructure-as code and CI/CD platforms at enterprise scale.

Skills & Experience

· Multi-cloud — hands-on with AWS, Azure, and GCP (at least one to depth); landing zones and guardrails.

· Infrastructure-as-code — Terraform — to a strong, production level.

· CI/CD — GitHub Enterprise Cloud, GitHub Actions, self-hosted runners; pipeline design and optimization.

· Containers and orchestration — Docker, Kubernetes (EKS / AKS / GKE), Helm.

· Security in the pipeline — SAST / DAST / SCA, container and image scanning (e.g. Trivy, Qualys), secrets management, policy-as-code (OPA / Gatekeeper).

· Observability and monitoring; artifact and registry management.

· Scripting and automation — Python, Bash, Go; Git-based workflows, code review, and release management at scale.

Certifications

Preferred: AWS / Azure / GCP associate-or-professional level; HashiCorp Terraform Associate; relevant security or Kubernetes certifications.

Key Responsibilities

Continuous Delivery through DevSecOps & Platform Engineering

· Design and build reusable infrastructure-as-code (Terraform) and pipeline patterns consumed self-service by application and cloud teams.

· Develop and maintain platform components across AWS, Azure, and GCP to the team's architecture and standards.

· Establish and enforce policy-as-code and automated guardrails so teams provision within approved boundaries without per-build approval.

· Guide and quality-assure vendor-executed work against the platform's design and standards.

· Provide day-to-day engineering support to squads consuming the platform — pipeline onboarding, troubleshooting, and platform enhancements.

DevSecOps & Platform Engineering

· Build, optimize, and operate the CI/CD delivery platform (GitHub Enterprise Cloud, GitHub Actions, self-hosted runners on EKS / AKS / GKE) used across ITG.

· Integrate automated security into the pipeline — threat modeling, SAST, DAST, SCA, container and image scanning, and continuous security monitoring — so security is embedded where code enters, not bolted on after.

· Reduce lead time and deployment friction; move the organization toward self-service, on-demand release under governance.

· Build observability, monitoring, and audit trails into the platform to support both reliability and regulatory examination.

DevSecOps & Platform Engineering Targets

· Consistently deliver higher-quality software with greater accuracy in estimation and delivery.

· Increase delivery visibility and reduce defects by engaging stakeholders early and throughout the SDLC.

· Build trust between development, security, and platform engineering, enabling continuous process improvement and risk mitigation.

· Maximize business value by enabling teams to adapt quickly to changing requirements through self-service and automation.

Pay: Php120,000.00 - Php160,000.00 per month

Work Location: In person