Senior DevSecOps Engineer: Secure Cloud & IaC Expert

SM Investments Corporation; Pasay; Sur place; PHP 1 200 000 - 2 100 000; Plein temps

Avantages offerts par ce poste

DevSecOps focus

Résumé du poste

SM Investments Corporation is seeking a seasoned DevSecOps security expert to strengthen our platform engineering and secure cloud-native environments across AWS, Azure, and GCP.

You will lead implementation of automated security controls in CI/CD, secure IaC pipelines, and enforce IAM, Zero Trust, and compliance frameworks. The role requires deep knowledge of container security, security testing tooling, and governance practices to protect our retail, banking, and property operations.

Qualifications

• Experience in DevSecOps within platform engineering, building secure developer platforms.
• Hands-on Terraform, Terraform module security, and IaC pipelines.
• Experience designing internal developer platforms (IDPs) or PaaS environments.
• Automating security controls at scale across cloud-native architectures.
• Familiarity with Cloud Security Posture Management tools such as Prisma Cloud or Dome9.

Responsabilités

• Automate security controls within CI/CD pipelines (Jenkins, GitLab, CircleCI, GitHub Actions).
• Secure cloud environments (AWS, Azure, GCP) and container platforms (Docker, Kubernetes).
• Integrate security testing tools (SAST, DAST, SCA) such as Snyk, SonarQube, Checkmarx, Fortify.
• Implement Infrastructure as Code (IaC) security using Terraform and CloudFormation.
• Enforce IAM best practices, RBAC, and federated identity (SAML, OAuth, Cognito).
• Apply security frameworks (ISO 27001, NIST, CIS) and compliance automation.
• Perform threat modeling, risk assessments, and vulnerability management.
• Secure DevOps toolchains, artifact repositories (JFrog, Nexus), and source control systems.
• Implement Zero Trust principles and cloud-native security controls.
• Maintain audit trails, enforce policies (OPA, AWS Config), and ensure governance compliance.
• Strong expertise in DevSecOps practices and secure SDLC.
• Deep knowledge of cloud and container security.
• Hands-on experience with IaC security and automation.
• Familiarity with Kubernetes security (RBAC, network policies, secrets management).
• Proficiency in security tools and automation frameworks.
• Experience with compliance-as-code tools (Chef InSpec, OpenSCAP).

Connaissances

CI/CD security

Cloud security

Container security

Security testing (SAST/DAST/SCA)

IaC security (Terraform, CloudFormac</

IAM security & RBAC

Security frameworks & compliance (ISO

Threat modeling

Vulnerability management

DevSecOps & secure SDLC

Kubernetes security

Automation frameworks & security tools

Compliance-as-code (Chef InSpec, OpenS

Zero Trust

Audit & governance (OPA, AWS Config)

Secure DevOps tooling (JFrog, Nexus)

Outils

Jenkins

GitLab

CircleCI

GitHub Actions

AWS

Azure

GCP

Docker

Kubernetes

Snyk

SonarQube

Checkmarx

Fortify

Terraform

CloudFormation

OPA

AWS Config

Description du poste

SM Investments Corporation is seeking a seasoned DevSecOps security expert to strengthen our platform engineering and secure cloud-native environments across AWS, Azure, and GCP.

You will lead implementation of automated security controls in CI/CD, secure IaC pipelines, and enforce IAM, Zero Trust, and compliance frameworks. The role requires deep knowledge of container security, security testing tooling, and governance practices to protect our retail, banking, and property operations.