Lead DevOps Engineer | Onsite - Nightshift

Satellite Office; Pasig; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Satellite Office in the Philippines is seeking a senior DevSecOps Engineer to own and continuously sharpen the security, reliability, observability, and cost efficiency of our cloud and edge infrastructure - and to have real influence over how it's all built.

This is a hands-on, senior individual contributor role with deep technical ownership, autonomy, and the ability to shape security posture, cost governance, and incident response across Cloudflare, AWS, and centralized logging stacks.

Qualifications

• 7+ years in DevOps, SRE, or DevSecOps roles.
• Deep, hands-on AWS experience in production.
• Strong Cloudflare experience, including WAF and rule-based security.
• Proven work across observability platforms like CloudWatch, New Relic, Sumo Logic.
• Solid understanding of web security (OWASP Top 10, DDoS mitigation) and networking basics.
• Track record building/runbooks and turning logs into actions.

Responsibilities

• Own security, reliability, observability, and cost optimization of cloud/edge infra.
• Configure and tune Cloudflare stack (WAF, CDN, firewall rules, rate limiting).
• Manage AWS security posture (IAM, VPCs, encryption, compliance).
• Design centralized logging and dashboards across CloudWatch, New Relic, Sumo Logic.

Skills

DevSecOps

AWS production

Cloudflare

Observability

Incident response

Network security

SRE

Security automation

Tools

CloudWatch

New Relic

Sumo Logic

Cloudflare

Terraform

Job description

Some engineers keep the lights on. You make sure they never flicker in the first place. We're looking for a senior DevSecOps Engineer to own and continuously sharpen the security, reliability, observability, and cost efficiency of our cloud and edge infrastructure - and to have real influence over how it's all built.

This is a hands-on, senior individual contributor role. No managing for the sake of managing - just deep technical ownership, strong opinions, and the autonomy to act on them.

What you'll own

Cloudflare & edge security - You'll configure, manage, and tune the full Cloudflare stack: WAF, CDN and caching strategy, firewall rules, rate limiting, bot management, and custom rules. You'll mine Cloudflare logs to spot attack patterns, performance bottlenecks, and false positives - then tune until the rules are sharp, effective, and quiet. You'll partner with engineering to expose APIs and customer-facing endpoints safely.

AWS security, governance & cost - You'll own our AWS security posture end to end: IAM and least-privilege access, network security (VPCs, security groups, NACLs), encryption, key management, and compliance controls. You'll also drive cost optimization - analysing spend and usage, then implementing the savings (right-sizing, reservations, architectural improvements) - and set the standards that keep every account and environment consistently governed.

Observability, logging & monitoring - You'll design and maintain centralised logging and observability across CloudWatch, New Relic, Sumo Logic, and Cloudflare. You'll lift the signal-to-noise ratio by cutting low-value logs and standardising formats, then build the dashboards, alerts, and SLO/SLI-based monitoring that turn raw data into real visibility.

Incident response & operational excellence - You'll build and continuously improve our IR processes - detection, escalation, communication, root cause analysis, and post-incident reviews - and act as a senior responder when security or availability is on the line. You'll turn every incident into a preventative improvement, and help engineering and product bake security and reliability in early, not bolt them on late.

You'll thrive here if you have

• 7+ years in DevOps, SRE, or DevSecOps roles
• Deep, hands-on AWS experience in production
• Strong Cloudflare experience, including WAF and rule-based security
• Proven work across observability platforms - CloudWatch, New Relic, Sumo Logic
• A solid grip on web security (OWASP Top 10, DDoS mitigation, API security) and networking fundamentals (HTTP, TLS, DNS)
• A track record building and improving operational processes and runbooks
• The instinct to turn logs and metrics into actionable change
• Sharp written communication for docs, incident reports, and recommendations

Nice to have

• Infrastructure as code (Terraform, CloudFormation, etc.)
• eCommerce or high-traffic, customer-facing systems
• CI/CD pipelines and secure deployment practices
• Experience mentoring engineers or leading technically

What success looks like

Cloudflare rules that are well-tuned, effective, and low-noise. AWS environments that are secure, cost-efficient, and consistently governed. Logs, dashboards, and alerts that give clear, actionable insight. Incidents detected earlier, resolved faster, and recurring less. And security and reliability woven into everyday engineering - not treated as someone else's problem.

If you want genuine ownership of infrastructure that matters, with the freedom to make it better, let's talk.