LEAD DEVOPS | Nightshift - Onsite

Satellite Office; Pasig; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Satellite Office in Pasig, Philippines seeks a Senior DevSecOps Engineer to own and sharpen security, reliability, observability, and cost efficiency for our cloud and edge infrastructure. This hands-on role emphasizes technical ownership with autonomy and strong opinions.

You'll manage Cloudflare security, AWS posture, and centralized logging across CloudWatch, New Relic, Sumo Logic, and Cloudflare, building runbooks and incident response practices. Collaboration with engineering is essential.

Qualifications

• 7+ years in DevOps, SRE, or DevSecOps roles.
• Deep hands-on AWS production experience.
• Strong Cloudflare experience including WAF and rule-based security.
• Experience with observability platforms (CloudWatch, New Relic, Sumo Logic).
• Solid understanding of web security and networking fundamentals.
• Proven ability to create and improve operational runbooks and processes.

Responsibilities

• Own Cloudflare security, WAF, CDN and rule-based security configurations.
• Manage AWS security posture end to end (IAM, VPCs, encryption, key management, compliance).
• Drive cost optimization through spend analysis and architectural improvements.
• Design and maintain centralized logging/observability across CloudWatch, New Relic, Sumo Logic, and Cloudflare.
• Develop incident response processes and act as senior responder during incidents.
• Collaborate with engineering to expose APIs and customer endpoints safely.
• Turn incident learnings into preventative improvements.

Skills

DevOps / SRE / DevSecOps

AWS production experience

Cloudflare security

Observability platforms

Web security fundamentals

Operational runbooks

Logging & metrics to action

Technical communication

Tools

Terraform

CloudFormation

Job description

Overview

Some engineers keep the lights on. You make sure they never flicker in the first place. We're looking for a senior DevSecOps Engineer to own and continuously sharpen the security, reliability, observability, and cost efficiency of our cloud and edge infrastructure — and to have real influence over how it's all built.

This is a hands-on, senior individual contributor role. No managing for the sake of managing — just deep technical ownership, strong opinions, and the autonomy to act on them.

What you'll own

Cloudflare & edge security — You'll configure, manage, and tune the full Cloudflare stack: WAF, CDN and caching strategy, firewall rules, rate limiting, bot management, and custom rules. You'll mine Cloudflare logs to spot attack patterns, performance bottlenecks, and false positives — then tune until the rules are sharp, effective, and quiet. You'll partner with engineering to expose APIs and customer-facing endpoints safely.

AWS security, governance & cost — You'll own our AWS security posture end to end: IAM and least-privilege access, network security (VPCs, security groups, NACLs), encryption, key management, and compliance controls. You'll also drive cost optimization — analysing spend and usage, then implementing the savings (right-sizing, reservations, architectural improvements) — and set the standards that keep every account and environment consistently governed.

Observability, logging & monitoring — You'll design and maintain centralised logging and observability across CloudWatch, New Relic, Sumo Logic, and Cloudflare. You'll lift the signal-to-noise ratio by cutting low-value logs and standardising formats, then build the dashboards, alerts, and SLO/SLI-based monitoring that turn raw data into real visibility.

Incident response & operational excellence — You'll build and continuously improve our IR processes — detection, escalation, communication, root cause analysis, and post-incident reviews — and act as a senior responder when security or availability is on the line. You'll turn every incident into a preventative improvement, and help engineering and product bake security and reliability in early, not bolt them on late.

You'll thrive here if you have

• 7+ years in DevOps, SRE, or DevSecOps roles
• Deep, hands-on AWS experience in production
• Strong Cloudflare experience, including WAF and rule-based security
• Proven work across observability platforms — CloudWatch, New Relic, Sumo Logic
• A solid grip on web security (OWASP Top 10, DDoS mitigation, API security) and networking fundamentals (HTTP, TLS, DNS)
• A track record building and improving operational processes and runbooks
• The instinct to turn logs and metrics into actionable change
• Sharp written communication for docs, incident reports, and recommendations

Nice to have

• Infrastructure as code (Terraform, CloudFormation, etc.)
• eCommerce or high-traffic, customer-facing systems
• CI/CD pipelines and secure deployment practices
• Compliance frameworks (PCI, SOC 2, etc.)
• Experience mentoring engineers or leading technically