Emerging DevSecOps Engineer – Cloud & CI/CD

SID Global; Pasig; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

SID Global's DevSecOps Execution & Support team seeks a collaborative learner to help deliver secure software across cloud platforms. You will build and maintain the internal, self-service platform to enable teams to build, deploy, and operate software securely.

You will grow into DevSecOps and cloud-engineering practices, developing hands-on capability across the tool chain, including policy-as-code and guardrails for compliant provisioning.

Qualifications

• Exposure to at least one public cloud (AWS, Azure, or GCP).
• Terraform experience or working knowledge with IaC.
• CI/CD practices with GitHub/GitHub Actions; containers (Docker) and basic Kubernetes.
• Exposure to security tooling (SAST/DAST/SCA, container/image scanning).
• Basic observability/monitoring; scripting in Python or Bash.
• Git-based workflows and code review.

Responsibilities

• Contribute to building and maintaining the DevSecOps platform and tool chain.
• Develop and maintain reusable IaC modules (Terraform) and golden patterns.
• Extend platform components across AWS, Azure and GCP following standards.
• Assist with policy-as-code and automated guardrails for provisioning.
• Provide hands-on support to squads onboarding to the platform and for troubleshooting.
• Support vendor-executed work to meet platform standards.

Skills

Git-based workflows

Python scripting

Bash scripting

Tools

Terraform

GitHub Actions

Docker

Kubernetes

Trivy

Qualys

SAST/DAST/SCA

Secrets management

CI/CD tooling

Job description

SID Global's DevSecOps Execution & Support team seeks a collaborative learner to help deliver secure software across cloud platforms. You will build and maintain the internal, self-service platform to enable teams to build, deploy, and operate software securely.

You will grow into DevSecOps and cloud-engineering practices, developing hands-on capability across the tool chain, including policy-as-code and guardrails for compliant provisioning.