DevSecOps Engineer
DevSecOps Engineer building secure CI/CD pipelines, infrastructure-as-code, and containerized platforms for ASCENT, embedding security scanning, compliance controls, and observability across cloud and on-prem environments. Stack: GitLab/GitHub Actions, Docker/Kubernetes, Terraform/Ansible, AWS/Azure/GCP, Python/Bash/Go.
- Compensation
- Not disclosed
- Location
- Clark Freeport Zone, Pampanga
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Full time
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in CS, Software Engineering, IT, Cybersecurity, or related field (equivalent experience considered)
- Minimum 3 years in DevOps, DevSecOps, Platform Engineering, SRE, Cloud, or Release Engineering
- Hands-on experience with CI/CD platforms (GitLab CI/CD, GitHub Actions, Jenkins, or Azure DevOps)
- Strong Linux, Git, containerization and orchestration with Docker/Podman and Kubernetes/OpenShift
- Experience with IaC tools such as Terraform, OpenTofu, Ansible, or CloudFormation
- Working knowledge of AWS, Azure, or Google Cloud
- Proficiency in Python, Bash, PowerShell, Go, JavaScript, or comparable languages
- Experience integrating SAST, DAST, SCA, secrets detection, container scanning, and vulnerability management into CI/CD
- Strong analytical, troubleshooting, and problem-solving abilities across apps, infra, pipelines, containers, networks, cloud
- Able to work U.S. business hours / Philippine night shift supporting U.S.-based operations and clients
Full description
About the role
We are looking for a curious, driven DevSecOps Engineer who enjoys solving difficult problems, improving how teams work, and turning manual processes into reliable automation. You will help establish platforms, pipelines, security controls, and engineering practices that enable ASCENT to move quickly without compromising security, quality, or mission assurance. The ideal candidate combines hands-on technical ability with a collaborative mindset. You should be comfortable working in an evolving R&D environment, evaluating new technologies, creating structures where it does not yet exist, and helping development teams move solutions from concept through testing, integration, and deployment.
Key responsibilities
- Design, build, and maintain secure CI/CD pipelines that automate software build, test, security assessment, packaging, release, and deployment activities.
- Embed security throughout the software development lifecycle by integrating static and dynamic application security testing, software composition analysis, secrets detection, container scanning, infrastructure scanning, and policy enforcement.
- Develop reusable tools, templates, services, and paved-road deployment patterns that make secure software delivery faster and easier for engineering teams.
- Use infrastructure-as-code and configuration-management practices to provision, configure, and maintain consistent development, integration, test, and production environments.
- Build and support containerized solutions across commercial cloud, government cloud, hybrid, on-premises, and restricted or disconnected environments.
- Help establish trusted artifact-management, dependency-management, codesigning, SBOM-generation, provenance, and vulnerability-remediation processes.
- Coordinate releases across multiple projects, maintain environment readiness, communicate release status, identify risks early, and support predictable delivery.
- Translate cybersecurity and compliance requirements into repeatable technical controls, automated evidence collection, and continuous monitoring wherever practical.
- Implement logging, monitoring, alerting, performance measurement, and operational dashboards that improve system reliability and accelerate troubleshooting.
- Establish and monitor meaningful delivery and reliability metrics, including deployment frequency, lead time for change, change-failure rate, mean time to recovery, pipeline health, and vulnerability-remediation time.
About you
- Bachelor's degree in computer science, Software Engineering, Information Technology, Cybersecurity, or a related field; equivalent relevant experience may be considered.