Senior Cloud Security Manager
HybridQuezon City, Metro Manila, Philippines
Job Summary
Act as a subject matter expert in access control and cloud-native patterns, providing guidance on least privilege, RBAC design, and secure-by-default configurations. Own the intake channels for access requests and exceptions, ensuring consistency in decision-making across automated and manual pathways. Lead technical briefings and workshops to explain automation prerequisites, driving adoption and behavioral change across engineering teams. Define rollout strategies for automated access reviews, monitor impact, and transition to hard enforcement once adoption stabilizes. Work closely with platform engineers to refine solutions that balance security requirements with operational efficiency while tracking adoption metrics.
Required Qualifications
- Bachelor's degree in computer science, Information Technology or equivalent
- 5+ years of experience in cloud engineering, platform engineering, DevOps, or cloud security engineering roles
- Strong understanding of cloud platforms (e.g., AWS, Azure, AliCloud), including core services, IAM/RBAC models, and infrastructure patterns
- Strong security mindset
- Knowledge and understanding of any industry standard Access Management Framework, Principal of Least Privileged Access, Just-in-Time Access, RBAC and ABAC and Cloud Security
- "automation-first" mindset
- Knowledge of following cloud platforms and Devop tools: Azure, Terraform, Github, GitHub Actions, Python, JIRA, Confluence, etc.
- Solid understanding of how engineering teams operate, including CI/CD pipelines, infrastructure-as-code (e.g., Terraform), and platform delivery models
- Proven ability to work with engineering teams, understand technical constraints, and drive practical solutions that balance security and operational needs
- Experience in designing or implementing automation solutions, with familiarity in scripting (e.g., Python, PowerShell) or working with automation tools
- Strong communication skills with the ability to explain technical concepts, lead discussions, and influence stakeholders across multiple teams and regions
- Ability to handle ambiguity and pushback constructively, and drive alignment through technical reasoning and collaboration
- Experience tracking and improving adoption and compliance metrics for technical processes or platforms
- Amenable to work UP Ayala Technohub (Quezon City)
- Amenable to work on a hybrid set-up (3x a week onsite)
- Amenable to work in any shift schedule assigned (ideally night shift; but flexible depending on business need)
Desired Qualifications
- Self-driven, able to meet objectives with a minimal amount of managerial oversight/supervision
- A team player who can interact with various internal functions such as business unit security officers, security engineers, reliability engineers, DevOps engineers
- Advocate constant learning from both success and failure, and encourages openness to change and continuous improvement
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.