Lead DevOps

Role Overview

• Configure, manage, and optimize Cloudflare services including: Web Application Firewall (WAF) CDN and caching strategies Firewall rules, rate limiting, bot management, and custom rules
• Analyze Cloudflare logs to identify: Security threats and attack patterns Performance bottlenecks False positives and rule tuning opportunities
• Partner with engineering teams to safely expose APIs and customer-facing endpoints
• Own AWS security posture, including: IAM best practices and least-privilege access Network security (VPCs, security groups, NACLs) Encryption, key management, and compliance controls
• Drive AWS cost optimization initiatives: Analyze usage patterns and spend Recommend and implement savings strategies (e.g., right-sizing, reservations, architectural improvements)
• Establish and maintain security and operational standards across AWS accounts and environments
• Design, optimize, and maintain centralized logging and observability across: Amazon CloudWatch, New Relic, Sumo Logic, Cloudflare
• Improve signal-to-noise ratio by: Reducing redundant or low-value logs Standardizing log formats and metadata
• Build and refine dashboards, alerts, and SLO/SLI-based monitoring to improve system visibility and reliability
• Create, document, and continuously improve incident response processes, including: Detection, escalation, and communication Root cause analysis and post-incident reviews
• Act as a senior responder for security and availability incidents Drive preventative improvements based on incident learnings
• Partner with engineering and product teams to embed security and reliability earlier in the development lifecycle

Requirements

• 7+ years of experience in DevOps, SRE, or DevSecOps roles
• Deep, hands-on experience with AWS in production environments
• Strong experience managing Cloudflare, including WAF and rule-based security
• Proven experience with observability platforms such as: CloudWatch, New Relic, Sumo Logic
• Strong understanding of: Web security principles (OWASP Top 10, DDoS mitigation, API security)
• Networking fundamentals (HTTP, TLS, DNS)
• Experience creating and improving operational processes and runbooks
• Ability to analyze logs and metrics to drive actionable improvements
• Strong written communication skills for documentation, incident reports, and recommendations.

Tech Stack

• AWS
• DNS

Benefits

• You’re Valued. You won’t just be a number. You’ll be part of a close-knit, collaborative team where your contributions matter.
• You’ll Grow. From day one, you’ll have access to learning opportunities, mentoring, and support to help you reach your full potential.
• You’ll Belong. We’re proud of our vibrant and inclusive culture, filled with team-building events, company-wide celebrations, wellness programs, and more.
• You’ll Work in Style. Our world-class offices are located in premium business hubs like BGC and Ortigas. Modern, comfortable, and designed to bring out your best.
• You’ll Work with Global Brands. We match you with top international clients where you’ll work directly with their teams and make a real impact.