Staff DevSecOps Engineer

• 10+ years of experience in DevOps, SRE, platform engineering, cloud security, security engineering, or related infrastructure roles
  
• 5+ years of experience in DevSecOps, cloud security, application security, or production security engineering
  
• Deep hands -on experience with Azure, including AKS, Entra ID, networking, storage, Azure SQL, secrets management, monitoring, and access controls
  
• Strong experience securing CI/CD pipelines, dependencies, containers, secrets, and shift -left security tooling
  
• Hands -on Kubernetes and container security experience, including workload identity, network controls, and runtime hardening
  
• Experience with infrastructure as code using Terraform, Bicep, or similar tooling
  
• Scripting skills in Python, Go, Bash, PowerShell, or a similar language
  
• Strong vulnerability management experience with practical risk -based prioritization
  
• Experience with least -privilege and just -in -time production access models
  
• Ability to work directly with engineering teams, influence without authority, and drive work independently
  
• Strong written communication skills for documentation, findings, exceptions, and audit evidence
  

Requirements

• 8+ years of experience in DevOps, SRE, platform engineering, cloud security, security engineering, or related infrastructure roles
  
• 5+ years of experience in DevSecOps, cloud security, application security, or production security engineering
  
• Deep hands -on experience with Azure, including AKS, Entra ID, networking, storage, Azure SQL, secrets management, monitoring, and access controls
  
• Strong experience securing CI/CD pipelines, dependencies, containers, secrets, and shift -left security tooling
  
• Hands -on Kubernetes and container security experience, including workload identity, network controls, and runtime hardening
  
• Experience with infrastructure as code using Terraform, Bicep, or similar tooling
  
• Scripting skills in Python, Go, Bash, PowerShell, or a similar language
  
• Strong vulnerability management experience with practical risk -based prioritization
  
• Experience with least -privilege and just -in -time production access modelsAbility to work directly with engineering teams, influence without authority, and drive work independentlyStrong written communication skills for documentation, findings, exceptions, and audit evidence
  

• Experience in regulated or high -assurance environments such as HIPAA, SOC 2, ISO 13485, ISO 27001, FDA -regulated software, healthcare SaaS, or fintech
  
• Experience with SaMD, FDA QMSR, ISO 13485/MDSAP, or validated software development environments
  
• Familiarity with Aikido, CrowdStrike, Vanta, New Relic, or similar tools
  
• Experience with SAML, OIDC, SCIM, SSO, MFA, Conditional Access, PIM, and access reviews
  
• Experience with Azure Policy, Defender for Cloud, Sentinel, Log Analytics, Key Vault, managed identities, and workload identity
  
• Experience with GitHub Actions, Azure DevOps, Playwright, TUnit, or similar tooling
  
• Experience with threat modeling, architecture reviews, incident response, disaster recovery, or ransomware resilience
  
• Relevant certifications such as Azure Security Engineer Associate, CKS, CCSP, or CISSP
  

Benefits

• Fully remote work setup
  
• Work from anywhere in the Philippines
  
• High -impact role with strong ownership and leadership visibility
  
• Opportunity to shape secure engineering standards and cloud security practices
  
• Work on meaningful infrastructure, platform, and software security challenges
  
• Collaborate with a high -performing team that values trust, ownership, and technical excellence