Lead DevOps Engineer | Onsite - Nightshift

Hammerjack Pty Ltd; Philippines; On-site; PHP 1,800,000 - 3,600,000; Full time

Job summary

Hammerjack Pty Ltd seeks a senior DevSecOps Engineer to own security, reliability, observability, and cost efficiency of cloud and edge infrastructure. This hands-on role emphasizes technical ownership with autonomy and strong opinions.

You will drive security posture, cost optimization, and incident resilience across AWS, Cloudflare, and logging platforms. We value deep expertise, cross-functional collaboration, and the ability to turn data into informed action.

Qualifications

• 7+ years in DevOps, SRE, or DevSecOps.
• Hands-on AWS production experience.
• Strong Cloudflare experience with WAF and rules.
• Experience with observability platforms: CloudWatch, New Relic, Sumo Logic.
• Solid web security and networking fundamentals.
• Track record in building/runbooks and operational processes.
• Ability to turn logs and metrics into action.

Responsibilities

• Own Cloudflare security, WAF, CDN, and bot management.
• Own AWS security posture: IAM, VPCs, encryption, cost optimization.
• Design centralized logging and observability across tools.
• Lead incident response, RCAs, and post-incident improvements.
• Collaborate with engineering to expose safe APIs and endpoints.

Skills

DevOps

SRE

DevSecOps

AWS

Observability

Web security

Incident response

Tools

Cloudflare

CloudWatch

New Relic

Sumo Logic

Terraform

CloudFormation

Job description

Overview

Some engineers keep the lights on. You make sure they never flicker in the first place. We're looking for a senior DevSecOps Engineer to own and continuously sharpen the security, reliability, observability, and cost efficiency of our cloud and edge infrastructure — and to have real influence over how it's all built.

This is a hands-on, senior individual contributor role. No managing for the sake of managing — just deep technical ownership, strong opinions, and the autonomy to act on them.

What you'll own

Cloudflare & edge security — You'll configure, manage, and tune the full Cloudflare stack: WAF, CDN and caching strategy, firewall rules, rate limiting, bot management, and custom rules. You'll mine Cloudflare logs to spot attack patterns, performance bottlenecks, and false positives — then tune until the rules are sharp, effective, and quiet. You'll partner with engineering to expose APIs and customer-facing endpoints safely.

AWS security, governance & cost — You'll own our AWS security posture end to end: IAM and least-privilege access, network security (VPCs, security groups, NACLs), encryption, key management, and compliance controls. You'll also drive cost optimization — analysing spend and usage, then implementing the savings (right-sizing, reservations, architectural improvements) — and set the standards that keep every account and environment consistently governed.

Observability, logging & monitoring — You'll design and maintain centralised logging and observability across CloudWatch, New Relic, Sumo Logic, and Cloudflare. You'll lift the signal-to-noise ratio by cutting low-value logs and standardising formats, then build the dashboards, alerts, and SLO/SLI-based monitoring that turn raw data into real visibility.

Incident response & operational excellence — You'll build and continuously improve our IR processes — detection, escalation, communication, root cause analysis, and post-incident reviews — and act as a senior responder when security or availability is on the line. You'll turn every incident into a preventative improvement, and help engineering and product bake security and reliability in early, not bolt them on late.

You'll thrive here if you have

• 7+ years in DevOps, SRE, or DevSecOps roles
• Deep, hands-on AWS experience in production
• Strong Cloudflare experience, including WAF and rule-based security
• Proven work across observability platforms — CloudWatch, New Relic, Sumo Logic
• A solid grip on web security (OWASP Top 10, DDoS mitigation, API security) and networking fundamentals (HTTP, TLS, DNS)
• A track record building and improving operational processes and runbooks
• The instinct to turn logs and metrics into actionable change
• Sharp written communication for docs, incident reports, and recommendations

Nice to have

• Infrastructure as code (Terraform, CloudFormation, etc.)
• eCommerce or high-traffic, customer-facing systems
• CI/CD pipelines and secure deployment practices
• Compliance frameworks (PCI, SOC 2, etc.)
• Experience mentoring engineers or leading technically

What success looks like

Cloudflare rules that are well-tuned, effective, and low-noise. AWS environments that are secure, cost-efficient, and consistently governed. Logs, dashboards, and alerts that give clear, actionable insight. Incidents detected earlier, resolved faster, and recurring less. And security and reliability woven into everyday engineering — not treated as someone else's problem.

If you want genuine ownership of infrastructure that matters, with the freedom to make it better, let's talk.