Senior SecDevOps Engineer - Embed Security into CI/CD Pipelines

About the job

We are hiring a SecDevOps Engineer. You will own the security lifecycle of our entire product and infrastructure. Instead of being a gatekeeper, you will embed security directly into our automated CI/CD pipelines. This role bridges the gap between development, operations, and compliance to ensure our ultra-fast payment processing is also ultra-secure.

At SQRIL (pronounced "Squirrel"), we’re building the future of cross-border QR code payments. We are looking for our fifth dev to add to our growing team. We are a venture backed startup with an opportunity for you to also earn equity / ownership.

About the Role

• Position: 40 hours/week
• Work setup: Fully remote, in the Philippines.
• Compensation:
• Base salary: TBD, with the upside of equity that vests based on your contributions.
• Equity: Ownership through stock grants as you help the company scale.

Required

·       4+ years in DevOps, SRE, or security engineering with hands-on GCP or Firebase experience

·       Strong understanding of secrets management, IAM, and least-privilege service accounts

·       Experience securing CI/CD pipelines and multi-environment deployments

·       Familiarity with Firestore/Storage security rules, API authentication, and webhook signature verification

·       Comfort with VPC, NAT, static egress IP, and third-party API IP allowlisting

·       Scripting proficiency (Bash, TypeScript/Node tooling) for automation and guardrails

·       Incident-response mindset: logging, correlation IDs, rotation runbooks

Strong plus

·       Fintech / payments security experience (payout APIs, partner integrations, PCI-adjacent handling)

·       HMAC signing, timing-safe crypto, idempotency, and MITM/tamper prevention patterns

·       Google Cloud Secret Manager, Firebase Functions Gen 2 secrets bindings

·       GitHub Actions with environment-scoped secrets and deployment gates

·       Experience hardening serverless architectures (cold start security, function-level secret scoping)

·       Knowledge of KYC/compliance flows (e.g. Persona) and audit trail design

·       SOC 2 / ISO 27001 familiarity or prior security program work

Soft Skills & Values

• Ownership Mentality: You take pride in your work, owning every aspect of development, from concept to completion, and ensuring it delivers value.
• Trust & Integrity: You’ll be a key partner in building this company, and trust is at the core of everything we do.
• Grit & Passion: Startups are tough, and we need someone with a passion for building, learning, and iterating. You see challenges as opportunities to grow.
• Continuous Learning: You’re always seeking ways to improve your skills, stay ahead of industry trends, and level up both technically and personally.

What Success will look Like For You At SQRIL

• Salary: USD$TBD/Month
• Work Schedule: Anytime between 8am-8pm Philippine Standard Time (40 hours/week)
• Equity: TBD, based on your overall impact.
• Role: Help us build and scale the tech and drive the success of SQRIL as a core team member. Great opportunity to evolve into a more Leadership role as the company grows.

Why Join Us?:

• High Impact, High Ownership: You’ll have the opportunity to help build something with a fast moving startup and own a part of the company’s success.
• Equity & Growth: Your equity will grow as the company scales. The upside is huge for those who get in early and help us succeed.
• Collaborative Culture: We believe in building a supportive, high-energy environment where every team member has a voice and a stake in the future. The Founder CEO is a repeat entrepreneur with several successful ventures.

The Reality Check

Building a startup is not easy, but the rewards—both personal and professional—are immense. We’re looking for someone who thrives in this high-stakes, high-reward environment. You’ll need passion, perseverance, and a desire to grow with us.

Ready to join us on this journey?

Apply now and become a key part of building something transformative. Let’s revolutionize cross-border mobile QR payments—together.