HI THERE I’m Geyvin Ediezca
Security Engineer | DevOps Engineer based in Philippines.

  • 10+ Years of Experience
  • 8 Certifications

About Me

Backend Security Engineer with 10+ years of experience across Software Engineering, DevOps, and Quality Assurance. Experienced in designing and securing backend systems, implementing Information Security Management Systems (ISMS), and establishing IT risk management processes to strengthen organizational security posture.

Proficient in developing secure backend services using Python and FastAPI and building scalable cloud architectures on AWS. Skilled in implementing secure infrastructure and access controls, including VPN-based architectures using WireGuard to protect internal services and APIs from public exposure.

Strong background in security assessments, vulnerability remediation, authentication and authorization design, and role-based access control (RBAC) for multi-tenant systems. Adept at automation, CI/CD, and maintaining local and cloud environments to support developers, testers, and production workloads.

Core Skills

  • Auth0
  • Stripe
  • Information Security
  • Threat & Vulnerability Management
  • Amazon Web Services (AWS)
  • Azure DevOps
  • Git
  • Python
  • FastAPI
  • PostgreSQL
  • Shell Script
  • Terraform
  • Ansible
  • Docker
  • Kubernetes
  • Github Actions
  • Networking
  • Linux
  • System Administration
  • Cloud Computing

Other Skills

  • Penetration Testing
  • Virtual Private Network (VPN)
  • Chronograf
  • Telegraf
  • HTML
  • CSS
  • Ruby
  • JavaScript
  • VueJS
  • Ruby on Rails
  • Python Django
  • Team Management
  • Agile Methodologies
  • Test Automation
  • API Testing

Work Experience

2024 - 2026

Datafarming Australia

Backend Security Engineer
  • Led the implementation of the Information Security Management System (ISMS) and IT Risk Management Process, establishing structured workflows for risk identification, assessment, and mitigation across backend services and infrastructure.
  • Designed and implemented a WireGuard VPN–based secure access architecture to protect internal services such as pgAdmin and backend APIs, eliminating direct exposure to the public internet and significantly reducing the organization's attack surface.
  • Conducted manual penetration testing and security assessments to identify vulnerabilities in backend services and APIs, proactively remediating security gaps and strengthening the platform's security posture.
  • Architected and enforced fine-grained role-based access control (RBAC) across organizational resources and farm data, enabling secure multi-tenant access management.
  • Developed backend services using Python and FastAPI, delivering secure and scalable APIs supporting agricultural data processing and enterprise workflows.
  • Implemented secure token management and refresh mechanisms for third-party integrations, ensuring reliable authentication and protected API communications.
  • Strengthened API security by eliminating sensitive data exposure, enforcing strict permission checks, and improving validation across critical endpoints.
  • Contributed to backend infrastructure and deployments on AWS, supporting secure cloud-native application architecture.
2022 - Present

ING Hubs Philippines

Senior DevOps Engineer
  • Maintained, automated, and monitored main business applications crucial to daily operations of mortgage application process.
  • Supported release process and conducted testing activities to ensure quality and reliability.
  • Managed continuous integration and deployment pipelines for efficient software delivery.
  • Collaborated with development teams to enhance application performance and reliability.
  • Automated infrastructure provisioning using tools like Terraform and Ansible.
  • Designed and implemented a data ingestion and processing service that integrates with internal platform APIs (e.g., risk data), transforms and persists data to a MSSQL database, and supports real-time dashboard visualization using Telegraf, Chronograf, Python, Bash, and Ansible, orchestrated via Azure DevOps.
  • Developed CI/CD pipelines to automate container image updates and vulnerability remediation, improving patching efficiency and strengthening overall security posture.
  • Monitored and managed application security posture through risk health dashboards, proactively identifying, triaging, and remediating vulnerabilities to ensure system integrity and compliance.
  • Managed and resolved incidents through ServiceNow, performing root cause analysis and implementing fixes to minimize downtime and prevent recurrence.
2021 - 2022

Accenture

Senior Software Engineer
  • Lead the team of 6 application developers of Hybris L2.
  • E-commerce Support Technical Lead of 3 teams.
  • Point of escalation for E-commerce technical issues.
  • Resolved issues raised via Service Now tickets related to infrastructure and operational issues.
  • Performed vulnerability assessment.
  • Administered and Provisioned OpenVPN access.
  • Monitored release deployment.
  • Automated and performed operational acceptance tests on lower and pre-production environments.
  • Performed disruptive and non-disruptive tests on pre-production environments.
  • Provided project estimation to outside projects as ATCP API Testing SME.
  • Conducted knowledge transfer to associate and senior software engineers.
  • Conducted test automation training to Accenture new hires.
2018 - 2021

Safelink Hub

Software Quality Assurance Lead
  • Used Docker to create and maintain environments for testing.
  • Configured, maintained, and integrated tests to CircleCI as part of Continuous Integration and Continuous Delivery.
  • Developed automated tests using Selenium Webdriver (Ruby Language).
  • Developed automated tests using Cypress (JavaScript Language).
  • Created Test Plans and Test Cases.
  • Performed Sanity, Regression, Integration, API, and Performance testing (Manual and Automated).
  • Assigned and supervised daily tasks and schedules of QAs.
  • Sent Software QA reports to Project Manager and Development Team.
  • Led quality assurance team in developing testing strategies for software products.
  • Collaborated with developers to identify and resolve software defects efficiently.
  • Implemented automated testing tools to improve testing processes and accuracy.
2020 - 2021

Project Assistant

DevOps Engineer
  • Built and set up development tools and infrastructure to support project needs.
  • Gathered stakeholder requirements and conveyed them to developers for alignment.
  • Automated and improved development and release processes to enhance workflow.
2020 - 2020

Achieve Without Borders

Test Automation Engineer
  • Developed automated tests using Ruby and JavaScript programming languages.
  • Performed Sanity, Regression, Integration, API, and Performance testing (Automated).
  • Aided in System and User Acceptance Testing.
  • Sent QA tasks update to SCRUM team as end-of-day report.
2018 - 2020

Freelance Web Development

Ruby on Rails Developer
  • Developed robust, secure web application from ground up based on client needs, utilizing Ruby and JavaScript frameworks.
  • Developed scalable web applications using Ruby on Rails framework.
  • Collaborated with clients to gather project requirements and specifications.
  • Implemented RESTful APIs for seamless integration with front-end applications.

Certifications

AWS Certified Solutions Architect - Associate

Earners of this certification have a comprehensive understanding of AWS services and technologies. They demonstrated the ability to build secure and robust solutions using architectural design principles based on customer requirements. Badge owners are able to strategically design well-architected distributed systems that are scalable, resilient, efficient, and fault-tolerant.

Verify

AWS Certified Cloud Practitioner

Earners of this certification have a fundamental understanding of IT services and their uses in the AWS Cloud. They demonstrated cloud fluency and foundational AWS knowledge. Badge owners are able to identify essential AWS services necessary to set up AWS-focused projects.

Verify