Staff Platform Security Engineer (Azure, AKS, CI/CD)

About the role

Full Scale, a fully remote-first company that helps businesses build teams of software engineers, is hiring a hands-on Senior / Staff Platform Security Engineer. The role builds, implements and validates security controls across Azure, AKS/Kubernetes, identity, CI/CD, cloud networking and production environments. It suits engineers who have personally built and improved production controls; candidates whose experience is mainly compliance, audit, SOC monitoring, architecture advisory or people management will not be a strong fit.

Required profile

• 6+ years of experience in cloud security, platform security, security engineering, infrastructure security, DevSecOps, SRE, DevOps or related technical infrastructure roles.
• At least 4 years of security-focused experience in cloud, platform, application, DevSecOps or production security engineering.
• Hands-on, practical experience implementing secure SDLC controls, supply-chain security, threat modeling and security architecture reviews.
• Strong communication skills and the ability to partner with engineering teams and drive remediation.
• Must be able to describe security controls personally configured or implemented, including tools, architecture decisions, problems and validation.

Required skills

• Azure security: Entra ID, managed and workload identities, RBAC, PIM, Key Vault, Defender for Cloud, Sentinel, private networking and least privilege.
• AKS/Kubernetes security: RBAC, workload identity, secrets, network policies, ingress controls, admission and policy controls, runtime protection and workload isolation.
• Secure SDLC: SAST, DAST, SCA/dependency scanning, secret scanning, IaC scanning, container scanning, vulnerability management, CVEs/CVSS and CI/CD security gates.
• Supply-chain security: image scanning, registries, image provenance or signing, base-image and dependency vulnerabilities.
• Network security: WAFs, firewalls, segmentation, private endpoints, ingress/egress controls, attack-surface reduction and zero trust.
• Security monitoring and incident response with SIEM telemetry, identity events, cloud audit logs and containment workflows.
• Infrastructure as code with Terraform, Bicep, ARM or comparable tools, including policy and security automation.

Preferred: regulated or high-assurance environments (HIPAA, SOC 2, ISO 27001, healthcare SaaS, fintech); Defender for Cloud, Sentinel, Azure Policy, Log Analytics, CrowdStrike, Aikido, Vanta, New Relic; GitHub Actions or Azure DevOps; SAML, OIDC, SCIM, SSO, MFA, Conditional Access; multi-tenant SaaS.NET, Angular or security automation in Python, Go, Bash or PowerShell; certifications such as Azure Security Engineer Associate, CKS, CCSP or CISSP.

What we offer

• 100% remote work, working from anywhere in the Philippines.
• Direct visibility and collaboration with engineering teams.
• Significant technical ownership and autonomy on a cloud-native healthcare/SaMD platform.
• Exposure to modern Azure, AKS, Kubernetes and cloud security technologies in a regulated, high-assurance environment.