Cloud Security Architect: AWS, Zero-Trust Defense

Coins.ph; Philippines; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

Coins.ph in the Philippines is seeking a seasoned Cloud Security Engineer to design and secure our AWS environment, IAM, VPC, and data protection strategies.

You will implement WAF and DDoS protection, establish robust network isolation across accounts and regions, and drive infrastructure-as-code with Terraform and CloudFormation.

Collaboration with R&D, operations, network, and AI teams will advance security posture, incident response, and risk remediation to support scalable growth.

Qualifications

• Bachelor's degree or higher in CS, cybersecurity, or related field.
• 5+ years in cloud security, network security, or cloud platform operations.
• Strong knowledge of AWS security services and architectures.
• Experience designing network isolation across multiple accounts/regions.
• Proficient in Terraform or CloudFormation.
• Scripting skills in Python, Go, or Shell.
• Excellent cross-team communication and documentation.

Responsibilities

• Plan, build, and optimize AWS security architecture including IAM, VPC, compute, and data security.
• Design and operate WAF, DDoS protection, and security monitoring with AWS services.
• Implement network isolation strategies across accounts, regions, and environments.
• Configure and audit security groups, NACLs, VPNs, and Transit Gateways.
• Drive security automation via Terraform, CloudFormation, and CI/CD pipelines.
• Collaborate with R&D, operations, network, and AI teams on security reviews.
• Lead incident response, risk assessment, and remediation tracking.

Skills

AWS Security

Network Security

Terraform

CloudFormation

Kubernetes

Scripting (Python/Go/Shell)

Zero Trust IAM

Education

Bachelor's degree in CS or related

Tools

AWS

WAF

GuardDuty

Config

CloudFront

VPC

Transit Gateway

KMS

PrivateLink

Job description

Coins.ph in the Philippines is seeking a seasoned Cloud Security Engineer to design and secure our AWS environment, IAM, VPC, and data protection strategies.

You will implement WAF and DDoS protection, establish robust network isolation across accounts and regions, and drive infrastructure-as-code with Terraform and CloudFormation.

Collaboration with R&D, operations, network, and AI teams will advance security posture, incident response, and risk remediation to support scalable growth.