Staff DevSecOps Engineer

Full Scale; Cebu City; On-site; PHP 1,800,000 - 2,800,000; Full time

Benefits offered by this job

100% remote work

Work from anywhere in the Philippines

High-impact role with leadership

Job summary

Full Scale is seeking a Staff DevSecOps Engineer to strengthen security across Azure, AKS, and CI/CD pipelines. You'll partner with engineering, IT, quality, product, and compliance teams to close gaps and raise security posture.

This role emphasizes hands-on security in cloud, containers, IaC, and vulnerability management, with remote-first work and overlap with US Central business hours.

Qualifications

• 5+ years in DevOps, SRE, platform engineering, cloud security, or related roles.
• 2+ years in DevSecOps, cloud security, application security, or production security.
• Hands-on experience with Azure, AKS, and Entra ID; CI/CD and software supply chain security.

Responsibilities

• Secure and improve CI/CD pipelines, including SAST, SCA, secrets, IaC, and container scanning.
• Strengthen Azure and AKS security, including identity, networking, secrets, and workload security.
• Improve Kubernetes and container security.
• Establish and maintain infrastructure security baselines using Terraform, Bicep, or similar tools.
• Lead vulnerability management, prioritization, remediation, and reporting.
• Improve privileged access using least-privilege and just-in-time access.
• Partner with developers on secure coding, dependency management, and security reviews.
• Support security incidents, audits, compliance activities, and technical documentation.

Skills

DevOps

SRE

Cloud security

Kubernetes

CI/CD

Scripting

Tools

Azure

AKS

Entra ID

Terraform

Bicep

Job description

Join one of the Philippines' fastest-growing tech companies. Open to Philippine-based candidates only, with required overlap with US Central business hours.

About Us: Full Scale is a fully remote-first company that helps businesses build dedicated teams of skilled software engineers. We make it easier for growing companies to find, onboard, and retain high-performing software talent.

About the Role

We are looking for a Staff DevSecOps Engineer to improve security across our Azure cloud infrastructure, Kubernetes environments, CI/CD pipelines, and production systems.

You’ll work closely with engineering, IT, quality, product, and compliance teams to identify security gaps, implement practical solutions, and strengthen our overall security posture.

Key Responsibilities

• Secure and improve CI/CD pipelines, including SAST, SCA, secrets, IaC, and container scanning.
• Strengthen Azure and AKS security, including identity, networking, secrets, and workload security.
• Improve Kubernetes and container security.
• Establish and maintain infrastructure security baselines using Terraform, Bicep, or similar tools.
• Lead vulnerability management, prioritization, remediation, and reporting.
• Improve privileged access using least-privilege and just-in-time access.
• Partner with developers on secure coding, dependency management, and security reviews.
• Support security incidents, audits, compliance activities, and technical documentation.

Requirements

• 5+ years of experience in DevOps, SRE, platform engineering, cloud security, security engineering, or related roles.
• 2+ years of experience in DevSecOps, cloud security, application security, or production security.
• Strong hands-on experience with Azure, AKS, and Entra ID.
• Strong experience with CI/CD and software supply chain security.
• Hands-on Kubernetes and container security experience.
• Experience with Terraform, Bicep, or similar IaC tools.
• Scripting experience with Python, Go, Bash, PowerShell, or similar.
• Experience with vulnerability management and risk-based prioritization.
• Experience with least-privilege and just-in-time access.
• Strong communication skills and ability to work independently and influence engineering teams.

Nice to Have

• Experience in regulated environments such as HIPAA, SOC 2, ISO 27001, healthcare SaaS, or fintech.
• Experience with Aikido, CrowdStrike, Vanta, Azure Policy, Defender for Cloud, Sentinel, or Key Vault.
• Experience with threat modeling, incident response, disaster recovery, or security architecture.
• Certifications such as Azure Security Engineer, CKS, CCSP, or CISSP.

Why Join Us

• 100% remote work setup
• Work from anywhere in the Philippines
• High-impact role with direct leadership visibility
• Opportunity to shape cloud and security practices
• Work on challenging cloud, Kubernetes, and software security problems
• Collaborative team that values ownership, trust, and technical excellence