DevOps Engineer

DevOps Engineer - Makati City  Company Description Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues.We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential.  Job Description We’re looking for a DevOps Engineer  to join our Cloud Security team , helping to build, automate, and scale secure cloud infrastructure and CI/CD pipelines.You’ll work at the intersection of DevOps, security, and cloud architecture , ensuring our platforms and services are secure by design  and by automation . This is a hands-on role for someone who enjoys combining engineering excellence with a strong security mindset — building pipelines that are not only fast and reliable, but compliant and safe. Automate and secure CI/CD pipelines  across multiple environments (e.g., GitHub, Jenkins, or OCI DevOps). Integrate security scanning  into the build and deployment process (SAST, SCA, IaC scanning, container image scanning). Implement and maintain infrastructure-as-code  (Terraform, Ansible) following security and compliance best practices. Enforce policy-as-code  and compliance guardrails (OPA, Conftest, Checkov). Collaborate with Cloud Security and Platform teams to define and apply secure cloud configurations  (IAM, networking, encryption). Support incident response automation  and post-incident hardening activities. Advocate for and contribute to a DevSecOps culture  across development and operations teams.  Qualifications 4+ years of DevOps, Site Reliability, or Infrastructure Engineering experience. Strong experience with CI/CD tools  (GitHub Actions, GitLab CI, Jenkins, or OCI DevOps). Proficiency in Infrastructure-as-Code  (Terraform, Ansible) and container orchestration  (Kubernetes). Experience integrating security tools  into CI/CD pipelines (e.g., Trivy, Checkov, Snyk, SonarQube). Hands-on experience with cloud platforms  (Oracle Cloud preferred; AWS, Azure, or GCP also relevant). Familiarity with identity and access management, network security , and encryption standards . Strong scripting skills in Python , Bash , or Go . Understanding of security principles  such as least privilege, zero trust, and defense-in-depth. Comfortable with monitoring and logging  tools (e.g., Prometheus, Grafana, ELK, OCI Logging). Experience with compliance frameworks  (ISO 27001, SOC 2, PCI-DSS) is a plus.  Additional Information We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices.  In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self.  We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way.  Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.   #LI-Hybrid