DevSecOps Engineer - Cloud Infrastructure & Security

Nexus Recruitment Group; Pasig; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Nexus Recruitment Group is seeking an experienced DevSecOps Engineer to integrate security into the software lifecycle within a cloud-native banking and fintech environment. You will design secure, scalable infrastructure and automate CI/CD pipelines across AWS, Azure, and/or GCP.

Responsibilities include implementing security automation in CI/CD, collaborating with development, QA and cybersecurity teams, managing IaC with Terraform and Ansible, and ensuring container security and compliance

Qualifications

• 3-5 years of hands-on experience in DevOps or Cloud Engineering, with at least 2 years focused on DevSecOps.
• Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, Azure DevOps) and IaC frameworks (Terraform, Ansible).
• Strong knowledge of container security, secrets management, and automated scanning tools (Aqua, Prisma Cloud, Snyk).
• Familiarity with cloud platforms (AWS, Azure, or GCP) and cloud security principles.
• Experience implementing or supporting compliance frameworks (PCI-DSS, ISO 27001, NIST) is a plus.
• Security certifications (e.g., GIAC, CEH, AWS Security Specialty, DevSecOps Foundation) are advantageous.
• Strong scripting and automation skills (Bash, Python, PowerShell, etc.).

Responsibilities

• Implement security automation tools and frameworks within CI/CD pipelines and cloud infrastructure environments.
• Collaborate with development, QA, and cybersecurity teams to ensure secure application delivery across environments.
• Identify, assess, and remediate vulnerabilities in containers, dependencies, and cloud configurations.
• Develop and maintain Infrastructure as Code (IaC) scripts using tools like Terraform, Ansible, or CloudFormation.
• Support secure deployment and orchestration using Kubernetes, Docker, and serverless technologies.
• Monitor and improve cloud security posture using tools such as AWS Config, Azure Security Center, or GCP Security Command Center.
• Assist in security audits, incident response, and the implementation of best practices across development and operations.
• Create technical documentation and share knowledge through security-focused enablement within engineering teams.

Skills

DevOps

CI/CD

Container security

IaC

Cloud platforms

Scripting

Education

Bachelor's degree in Computer Science / Information Security

Tools

Terraform

Ansible

Kubernetes

Jenkins

GitLab CI

Azure DevOps

Aqua

Prisma Cloud

Snyk

Job description

About the job DevSecOps Engineer - Cloud Infrastructure & Security

Job Summary:

We are looking for experienced DevSecOps Engineers to integrate security practices into every stage of the software development and deployment lifecycle. This role plays a critical part in designing secure, scalable, and automated infrastructure within a cloud-native banking and fintech environment. The role ensures systems are resilient, compliant, and aligned with industry best practices for CI/CD, containerization, and infrastructure as code (IaC).

The ideal candidate has a strong foundation in DevOps principles with hands-on experience embedding security across cloud platforms, pipelines, and production environments.

Key Responsibilities:

• Implement security automation tools and frameworks within CI/CD pipelines and cloud infrastructure environments.
• Collaborate with development, QA, and cybersecurity teams to ensure secure application delivery across environments.
• Identify, assess, and remediate vulnerabilities in containers, dependencies, and cloud configurations.
• Develop and maintain Infrastructure as Code (IaC) scripts using tools like Terraform, Ansible, or CloudFormation.
• Support secure deployment and orchestration using Kubernetes, Docker, and serverless technologies.
• Monitor and improve cloud security posture using tools such as AWS Config, Azure Security Center, or GCP Security Command Center.
• Assist in security audits, incident response, and the implementation of best practices across development and operations.
• Create technical documentation and share knowledge through security-focused enablement within engineering teams.

Qualifications:

• Bachelors degree in Computer Science, Information Security, or a related field.
• 3-5 years of hands-on experience in DevOps or Cloud Engineering, with at least 2 years focused on DevSecOps or secure DevOps practices.
• Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, Azure DevOps) and IaC frameworks (e.g., Terraform, Ansible).
• Strong knowledge of container security, secrets management, and automated scanning tools (e.g., Aqua, Prisma Cloud, Snyk).
• Familiarity with cloud platforms (AWS, Azure, or GCP) and cloud security principles.
• Experience implementing or supporting compliance frameworks (e.g., PCI-DSS, ISO 27001, NIST) is a plus.
• Security certifications (e.g., GIAC, CEH, AWS Security Specialty, DevSecOps Foundation) are advantageous.
• Strong scripting and automation skills (Bash, Python, PowerShell, etc.).