Senior Security Engineer

The Senior Cybersecurity Engineer is responsible for designing, implementing, and optimizing cloud security architecture, network security solutions, and DevSecOps controls across OCI and cloud-native platforms. The role provides technical leadership for security engineering initiatives and acts as the primary security partner for development, platform, and infrastructure teams. Key Responsibilities Cloud Security Architecture • Design secure OCI architectures and landing zones. • Lead cloud security posture management and configuration compliance initiatives. • Define cloud security standards and reference architectures. • Lead implementation of Infrastructure as Code security controls. Network & Zero Trust Security • Design and manage Palo Alto NGFW security architecture. • Implement F5 WAF and application delivery security controls. • Design Zero Trust segmentation and micro-segmentation strategies. • Establish secure access models for cloud-native platforms. Kubernetes & Container Security • Lead Kubernetes security architecture and governance. • Implement: • Kubernetes RBAC • Network Policies • Admission Controllers • Pod Security Controls • Deploy and manage Falco runtime security monitoring. • Implement Istio service mesh security and mTLS. DevSecOps Leadership • Architect GitLab DevSecOps pipelines. • Implement: • SAST • DAST • SCA • IaC Scanning • Secrets Detection • Policy as Code • Define automated security quality gates. • Lead secure SDLC initiatives. Identity & Secrets Management • Design enterprise authentication and authorization using Keycloak. • Implement Vault-based secrets lifecycle management. • Support workload identities and cloud-native authentication models. Security Operations • Lead security investigations and root-cause analysis. • Define detection use cases and response playbooks. • Conduct security reviews for major releases and platform changes. Qualifications • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field. • 4–7 years of relevant experience in cybersecurity engineering, cloud security, or infrastructure security. • Hands-on experience in implementing and managing cloud security solutions, preferably in Oracle Cloud Infrastructure (OCI). • Strong knowledge of network security, firewalls, Web Application Firewalls (WAF), and Zero Trust security principles. • Experience with Kubernetes security, container security, and cloud-native environments. • Practical experience in DevSecOps practices and integrating security controls into CI/CD pipelines. • Good understanding of Identity and Access Management (IAM), secrets management, and security automation. • Strong analytical, troubleshooting, and problem-solving skills. • Ability to collaborate effectively with development, infrastructure, and platform teams. Required Skills • Strong OCI security expertise. • Advanced Palo Alto NGFW administration. • F5 BIG-IP (LTM/WAF) administration. • Advanced GitLab DevSecOps implementation. • Terraform and Pulumi. • Kubernetes security. • HashiCorp Vault. • Keycloak IAM and federation. • OPA and Policy-as-Code frameworks. Preferred Certifications • CISSP • CCSP • PCNSE • OCI Security Professional • CKS • HashiCorp Vault Associate • Terraform Associate

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field. 4–7 years of relevant experience in cybersecurity engineering, cloud security, or infrastructure security. Hands-on experience in implementing and managing cloud security solutions, preferably in Oracle Cloud Infrastructure (OCI). Strong knowledge of network security, firewalls, Web Application Firewalls (WAF), and Zero Trust security principles. Experience with Kubernetes security, container security, and cloud-native environments. Practical experience in DevSecOps practices and integrating security controls into CI/CD pipelines. Good understanding of Identity and Access Management (IAM), secrets management, and security automation. Strong analytical, troubleshooting, and problem-solving skills. Ability to collaborate effectively with development, infrastructure, and platform teams.

Cloud Security Architecture: Design secure OCI architectures and landing zones. Lead cloud security posture management and configuration compliance initiatives. Define cloud security standards and reference architectures. Lead implementation of Infrastructure as Code security controls. Network & Zero Trust Security: Design and manage Palo Alto NGFW security architecture. Implement F5 WAF and application delivery security controls. Design Zero Trust segmentation and micro-segmentation strategies. Establish secure access models for cloud-native platforms. Kubernetes & Container Security: Lead Kubernetes security architecture and governance. Implement: Kubernetes RBAC, Network Policies, Admission Controllers, Pod Security Controls. Deploy and manage Falco runtime security monitoring. Implement Istio service mesh security and mTLS. DevSecOps Leadership: Architect GitLab DevSecOps pipelines. Implement: SAST, DAST, SCA, IaC Scanning, Secrets Detection, Policy as Code. Define automated security quality gates. Lead secure SDLC initiatives. Identity & Secrets Management: Design enterprise authentication and authorization using Keycloak. Implement Vault-based secrets lifecycle management. Support workload identities and cloud-native authentication models. Security Operations: Lead security investigations and root-cause analysis. Define detection use cases and response playbooks. Conduct security reviews for major releases and platform changes.