DevSecOps Engineer

Private Advertiser; Metro Manila; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Private Advertiser is seeking an experienced software/infrastructure engineer with strong DevSecOps expertise in a multi-cloud environment. The role requires hands-on work with Terraform, GitHub Actions, and container orchestration to build secure, scalable platforms.

You will own CI/CD pipelines, implement security controls across the software lifecycle, and contribute to observability and release management in a regulated enterprise context.

Qualifications

• Bachelor's degree in Computer Science, Engineering, IT or equivalent practical experience.
• At least 5 years in software/infrastructure engineering, incl. 3+ years in DevSecOps, cloud engineering, or SRE.
• Owns infrastructure-as-code and CI/CD platforms at enterprise scale.
• Experience with multi-cloud (AWS, Azure, GCP) and landing zones/guardrails.
• Strong IaC with Terraform; CI/CD with GitHub Enterprise Cloud and GitHub Actions.
• Proficient in containers/orchestration (Docker, Kubernetes) and Helm.
• Security in the pipeline: SAST/DAST/SCA, secrets management, policy-as-code.
• Observability and monitoring; artifact/registry management.
• Scripting in Python, Bash, Go; Git workflows and release management.

Skills

DevSecOps

Multi-cloud

Security in pipeline

Observability

Scripting & automation

Education

Bachelor's degree or equivalent

Tools

Terraform

GitHub Actions

GitHub Enterprise Cloud

Docker

Kubernetes

Helm

Trivy

OPA/Gatekeeper

Job description

• Bachelor's degree in Computer Science, Engineering, Information Technology, or equivalent practical experience. Formal degreemay be substituted by demonstrated professional experience.

• At least 5 years in software / infrastructure engineering, including 3+ years hands-on in DevSecOps, cloud engineering, or SRE.Demonstrated experience owning infrastructure-as-code and CI/CD platforms at enterprise scale.

• DevSecOps and platform engineering practices, CI/CD pipeline components and metrics; multi-cloud architecture, landing zones andguardrails; containers and Kubernetes; secure SDLC; regulated-banking change management, audit, and information-security requirements.

• Multi-cloud — hands-on with AWS, Azure, and GCP (at least one to depth); landing zones and guardrails.

• Infrastructure-as-code — Terraform — to a strong, production level.

• CI/CD — GitHub Enterprise Cloud, GitHub Actions, self-hosted runners; pipeline design and optimization.

• Containers and orchestration — Docker, Kubernetes (EKS / AKS / GKE), Helm.

• Security in the pipeline — SAST / DAST / SCA, container and image scanning (e.g. Trivy, Qualys), secrets management, policy-as-code (OPA / Gatekeeper).

• Observability and monitoring; artifact and registry management.

• Scriptingandautomation—Python,Bash,Go;Git-basedworkflows,codereview, and release management at scale.