DevOps Engineer

Private Advertiser; Metro Manila; On-site; PHP 600,000 - 840,000; Full time

Job summary

Private Advertiser in Metro Manila is seeking an experienced DevSecOps/Platform Engineer to build and maintain infrastructure-as-code modules and to extend platform components across AWS, Azure, and GCP.

You will help implement policy-as-code, integrate security into pipelines, and support squads using the platform through onboarding and troubleshooting, while promoting self-service and automation.

Qualifications

• At least 2 years in software or infrastructure engineering, with hands-on exposure to DevSecOps, cloud, or CI/CD.
• Experience with infrastructure-as-code and platform engineering is valued.
• Willingness to deepen expertise in IaC and platform engineering.
• Exposure to platform components across AWS, Azure, and GCP.

Responsibilities

• Build and maintain reusable infrastructure-as-code modules (Terraform) and golden patterns to established standards.
• Implement and extend platform components across AWS, Azure, and GCP per architecture and standards.
• Help implement policy-as-code and automated guardrails for provisioning within approved boundaries.
• Support and quality-assure vendor-executed work against platform standards.
• Provide hands-on support to squads consuming the platform—onboarding, troubleshooting, and small enhancements.
• Build and operate the CI/CD delivery platform (GitHub Enterprise Cloud, GitHub Actions, self-hosted runners on EKS/AKS/GKE).
• Help integrate automated security into the pipeline — SAST, DAST, SCA, container/image scanning, and continuous security monitoring.
• Reduce lead time and deployment friction; promote self-service, governance-based release processes.
• Build observability, monitoring, and audit trails to support reliability and regulatory review.
• Contribute to higher-quality software with greater consistency and accuracy.
• Engage with stakeholders through the SDLC to increase delivery visibility and reduce defects.
• Support trust between development, security, and platform engineering; pursue continuous process improvement.
• Help teams adapt to changing requirements via self-service and automation, building depth over time.

Skills

Public cloud exposure

Terraform

GitHub Actions

Docker

Kubernetes (EKS/AKS/GKE)

Security tooling (SAST/DAST/SCA)

Secrets management

Python scripting

Bash scripting

CI/CD pipelines

Observability

Code review workflows

Tools

Terraform

Docker

Kubernetes (EKS/AKS/GKE)

GitHub Actions

SAST/DAST/SCA

Secrets management

Python

Bash

Job description

• Working exposure to at least one public cloud — AWS, Azure, or GCP.

• Infrastructure-as-code — Terraform — working knowledge, willing to deepen.

• CI/CD — GitHub / GitHub Actions; containers — Docker and basic Kubernetes (EKS / AKS / GKE).

• Exposure to pipeline security tooling — SAST / DAST / SCA, container/image scanning (e.g. Trivy, Qualys), secrets management.

• Basic observability and monitoring; scripting (e.g. Python, Bash).

• Git-based workflows and code review.

• At least 2 years in software or infrastructure engineering, including hands-on exposure to DevSecOps, cloud, or CI/CD. Eagerness to build depth in infrastructure-as-code and platform engineering.

Responsibilities:

• Build and maintain reusable infrastructure-as-code modules (Terraform) and golden patterns, to established standards.

• Implement and extend platform components across AWS, Azure, and GCP, following the platform's architecture and standards.

• Help implement policy-as-code and automated guardrails so teams can provision within approved boundaries.

• Support and help quality-assure vendor-executed work against the platform's standards.

• Provide hands-on support to squads consuming the platform — pipeline onboarding, basic troubleshooting, and small enhancements under guidance.

• Build and help operate the CI/CD delivery platform (GitHub Enterprise Cloud, GitHub Actions, self-hosted runners on EKS / AKS / GKE) used across ITG.

• Help integrate automated security into the pipeline — threat modeling, SAST, DAST, SCA, container and image scanning, and continuous security monitoring.

• Reduce lead time and deployment friction; move the organization toward self-service, on-demand release under governance.

• Build observability, monitoring, and audit trails into the platform to support both reliability and regulatory examination

• Contribute to delivering higher-quality software with greater consistency and accuracy.

• Help increase delivery visibility and reduce defects by engaging with stakeholders through the SDLC.

• Support trust between development, security, and platform engineering, contributing to continuous process improvement.

• Help teams adapt to changing requirements through self-service and automation, building technical depth over time.