OCI Cloud Security Engineer – GitOps & Automation

Avaloq; Philippines; Hybrid; PHP 900,000 - 1,500,000; Full time

Job summary

Avaloq is seeking a proactive Cloud Security Engineer to design, implement and operate security controls with a strong OCI focus. You will transform security requirements into automated, repeatable solutions emphasizing GitOps and IaC.

You will help harden cloud resources, automate certificate and key management, and enable secure-by-default configurations using Terraform and OCI services. Collaboration with developers and platform engineers is essential.

Qualifications

• 3–6+ years in security engineering or related fields.
• Experience deploying endpoint security agents at scale.
• End-to-end certificate lifecycle management and TLS troubleshooting.
• Strong OCI experience; AWS/Azure beneficial.
• Knowledge of OCI Cloud Guard, Security Zones, Vault, WAF, Bastion, Identity Domains, NSGs.
• GitOps with GitHub: branch protection, CI/CD pipelines.
• Terraform configurations for OCI provider; remote state management.
• Automation scripting in Python or Bash for security tasks.
• Hands-on ability to implement security controls, not only advise.

Responsibilities

• Data Security: Deploy and manage DLP policies across endpoints, cloud, and network.
• Endpoint Security: Deploy and manage endpoint security agents at scale.
• Network Security: Tune IDS/IPS, WAF policies, and rate-limiting rules.
• Cryptography & Certificate Management: Automate certificate lifecycle across services; manage encryption.
• Cloud Security & Secure-by-Default: Create Terraform modules and guardrails for OCI baselines.
• GitOps Practices & Automation: Use GitHub as source of truth; write Terraform modules and CI/CD pipelines.
• Automation scripting: Python/Bash for log parsing, bulk changes, compliance reporting.

Skills

Security engineering

SecOps

Infrastructure security

Automation mindset

Python scripting

Tools

OCI Terraform

Terraform

GitHub Actions

Python

Bash

Job description

Avaloq is seeking a proactive Cloud Security Engineer to design, implement and operate security controls with a strong OCI focus. You will transform security requirements into automated, repeatable solutions emphasizing GitOps and IaC.

You will help harden cloud resources, automate certificate and key management, and enable secure-by-default configurations using Terraform and OCI services. Collaboration with developers and platform engineers is essential.