DevSecOps (AWS, Terraform, Ansible, Docker, Kubernetes)

CMC-APAC Private Limited; Santo Niño 1st; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

CMC-APAC Private Limited is seeking a DevSecOps Engineer to strengthen cloud infrastructure, embed observability, and automate security controls across product and infrastructure delivery.

You will design reusable platform components, implement Infrastructure as Code, manage CI/CD security, and ensure governance and compliance to government standards while enabling scalable digital transformation across the business, delivering secure, reliable cloud services to internal teams.

Qualifications

• Degree or Diploma in CS, CE, ECE, IT or related discipline.
• Experience in DevSecOps, SRE, or Cloud Platform Engineering.
• Hands-on automation, observability, and security in cloud-native environments.
• Experience with observability across apps and infra, including metrics, logs, tracing.
• Ability to set monitoring standards across product teams.
• Proficiency in IaC, Configuration Management, and Cloud Automation.
• Security controls in CI/CD, vulnerability management, IAM, and runbooks.
• Strong scripting (Python, Bash, PowerShell) and cloud/container tech (AWS, Docker, Kubernetes).

Responsibilities

• Plan, design, and maintain shared DevSecOps capabilities and reusable components.
• Maintain frameworks, docs, and controls for business continuity and digital transformation.
• Automate IaC deployment and cloud operational processes.
• Create reusable infra products for faster product delivery.
• Develop automated workflows for secure and efficient cloud ops.
• Embed security-by-design throughout product and infra lifecycles.
• Automate security checks within CI/CD pipelines.
• Strengthen vulnerability management and threat detection, with remediation.
• Diagnose complex issues across distributed environments and improve availability.
• Contribute to incident response, service health dashboards, alerting standards, and runbooks.

Skills

Observability design

Automation scripting

Cloud monitoring

Security by design

Problem solving

Education

Degree in CS/CE/IT

Tools

Terraform

Ansible

Docker

Kubernetes

Git workflows

CI/CD pipelines

Job description

About the role

The DevSecOps Engineer will strengthen cloud infrastructure capabilities and operational excellence by integrating monitoring, security, and automation practices into new product and infrastructure development. This role is crucial for embedding product-centric thinking, establishing robust observability frameworks, automating security controls, and optimising cloud operations at scale while maintaining compliance with government standards.

Key responsibilities

• Plan, design, implement, and maintain shared DevSecOps capabilities for in-house and newly introduced digital products, including building reusable platform components and integrating observability into product delivery

• Maintain supporting frameworks, documentation, and operational controls required for business continuity and ongoing digital transformation

• Establish essential automation capabilities, including full-scale deployment of Infrastructure as Code (IaC) and automating cloud operational processes

• Create reusable infrastructure products that enable product teams to transform or build solutions more efficiently

• Develop automated operational workflows to ensure consistent, secure, and efficient cloud operations

• Embed security-by-design principles throughout the product and infrastructure lifecycle

• Automate security checks and compliance controls within CI/CD pipelines

• Strengthen vulnerability management and threat-detection capabilities and support timely remediation activities

• Diagnose complex issues across distributed environments and improve availability and performance through monitoring and automation

• Contribute to incident response and problem management, including ownership of service health dashboards, alerting standards, operational runbooks, and continuous service improvement initiatives

About you

• Degree or Diploma in Computer Science, Computer Engineering, Electronics Engineering, Information Technology, or related disciplines

• Relevant experience in DevSecOps Engineering, Site Reliability Engineering (SRE), Cloud Platform Engineering, or similar technical roles

• Hands-on experience designing and operating automation, observability, and security capabilities in cloud-native environments

• Hands-on experience implementing observability across applications, infrastructure, and distributed cloud services, including metrics collection and correlation, log aggregation and analysis, distributed tracing, service health dashboard design, alert strategy definition, and root cause analysis support

• Ability to establish consistent monitoring standards across multiple product teams

• Proficiency in Infrastructure as Code (IaC), Configuration Management, and Cloud Automation

• Experience with cloud provisioning automation, certificate lifecycle management, Linux patch automation using Ansible, routine maintenance automation, compliance checks, and disaster recovery automation

• Capability to create reusable modules and automation workflows that improve consistency, reduce manual effort, and enable adoption of approved cloud patterns

• Experience implementing security controls within cloud platforms and CI/CD pipelines, including vulnerability management, secrets management, certificate management, identity and access controls, security monitoring, and remediation tracking

• Strong understanding of government security policies, regulatory requirements, risk management frameworks, and audit evidence requirements

• Strong proficiency in scripting and automation (Python, Bash, PowerShell), cloud and containerisation (AWS preferred, Docker, Kubernetes), DevOps and infrastructure (Terraform, Ansible, Git-based workflows, CI/CD platforms), monitoring and security (monitoring platforms, logging platforms, API integrations, secrets management, automated testing frameworks)