DevSecOps Platform Engineer: Secure Cloud & IaC Automation

Socium - Teams Done Differently; Pasay; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Socium - Teams Done Differently is seeking an experienced DevSecOps engineer to automate security across CI/CD pipelines and secure cloud-native environments. You will implement IAM RBAC, Zero Trust, and compliance automation while integrating SAST/DAST/SCA tools.

Responsibilities include IaC security with Terraform and CloudFormation, securing Kubernetes, and strengthening secure SDLC practices across platform teams.

Qualifications

• Experience in DevSecOps within platform engineering.
• Hands-on Terraform and IaC pipelines security.
• Design secure internal developer platforms (IDPs) or PaaS environments.
• Experience with CSPM tools such as Prisma Cloud or Dome9.
• Security automation in CI/CD and governance tooling.

Responsibilities

• Automate security controls within CI/CD pipelines.
• Secure cloud environments and container platforms.
• Integrate security testing tools (SAST, DAST, SCA).
• Implement IaC security using Terraform and CloudFormation.
• Enforce IAM best practices, RBAC, and federated identity.
• Apply security frameworks and compliance automation.
• Perform threat modeling and risk assessments.
• Secure DevOps toolchains and repositories.
• Implement Zero Trust principles and governance controls.
• Maintain audit trails and governance compliance.
• Familiarity with Kubernetes security (RBAC, network policies, secrets).
• Experience with compliance-as-code tools (Chef InSpec, OpenSCAP).

Skills

DevSecOps

CI/CD security

Cloud security

Kubernetes security

IaC security

Threat modeling

Vulnerability management

Governance and compliance

Tools

Terraform

CloudFormation

Snyk

SonarQube

Checkmarx

Fortify

Jenkins

GitLab

CircleCI

GitHub Actions

Job description

Socium - Teams Done Differently is seeking an experienced DevSecOps engineer to automate security across CI/CD pipelines and secure cloud-native environments. You will implement IAM RBAC, Zero Trust, and compliance automation while integrating SAST/DAST/SCA tools.

Responsibilities include IaC security with Terraform and CloudFormation, securing Kubernetes, and strengthening secure SDLC practices across platform teams.