Remote Lead DevSecOps Engineer - Azure & AKS Security

Full Scale; Cebu City; On-site; PHP 1,800,000 - 2,800,000; Full time

Benefits offered by this job

100% remote work

Work from anywhere in the Philippines

High-impact role with leadership

Job summary

Full Scale is seeking a Staff DevSecOps Engineer to strengthen security across Azure, AKS, and CI/CD pipelines. You'll partner with engineering, IT, quality, product, and compliance teams to close gaps and raise security posture.

This role emphasizes hands-on security in cloud, containers, IaC, and vulnerability management, with remote-first work and overlap with US Central business hours.

Qualifications

• 5+ years in DevOps, SRE, platform engineering, cloud security, or related roles.
• 2+ years in DevSecOps, cloud security, application security, or production security.
• Hands-on experience with Azure, AKS, and Entra ID; CI/CD and software supply chain security.

Responsibilities

• Secure and improve CI/CD pipelines, including SAST, SCA, secrets, IaC, and container scanning.
• Strengthen Azure and AKS security, including identity, networking, secrets, and workload security.
• Improve Kubernetes and container security.
• Establish and maintain infrastructure security baselines using Terraform, Bicep, or similar tools.
• Lead vulnerability management, prioritization, remediation, and reporting.
• Improve privileged access using least-privilege and just-in-time access.
• Partner with developers on secure coding, dependency management, and security reviews.
• Support security incidents, audits, compliance activities, and technical documentation.

Skills

DevOps

SRE

Cloud security

Kubernetes

CI/CD

Scripting

Tools

Azure

AKS

Entra ID

Terraform

Bicep

Job description

Full Scale is seeking a Staff DevSecOps Engineer to strengthen security across Azure, AKS, and CI/CD pipelines. You'll partner with engineering, IT, quality, product, and compliance teams to close gaps and raise security posture.

This role emphasizes hands-on security in cloud, containers, IaC, and vulnerability management, with remote-first work and overlap with US Central business hours.