Qiwa Senior Security Engineer

Job Description The Senior Cybersecurity Engineer is responsible for designing, implementing, and optimizing cloud security architecture, network security solutions, and DevSecOps controls across OCI and cloud-native platforms. The role provides technical leadership for security engineering initiatives and acts as the primary security partner for development, platform, and infrastructure teams. Key Responsibilities Cloud Security Architecture • Design secure OCI architectures and landing zones. • Lead cloud security posture management and configuration compliance initiatives. • Define cloud security standards and reference architectures. • Lead implementation of Infrastructure as Code security controls. Network & Zero Trust Security • Design and manage Palo Alto NGFW security architecture. • Implement F5 WAF and application delivery security controls. • Design Zero Trust segmentation and micro-segmentation strategies. • Establish secure access models for cloud-native platforms. Kubernetes & Container Security • Lead Kubernetes security architecture and governance. • Implement: • Kubernetes RBAC • Network Policies • Admission Controllers • Pod Security Controls • Deploy and manage Falco runtime security monitoring. • Implement Istio service mesh security and mTLS. DevSecOps Leadership • Architect GitLab DevSecOps pipelines. • Implement: • SAST • DAST • SCA • IaC Scanning • Secrets Detection • Policy as Code • Define automated security quality gates. • Lead secure SDLC initiatives. Identity & Secrets Management • Design enterprise authentication and authorization using Keycloak. • Implement Vault-based secrets lifecycle management. • Support workload identities and cloud-native authentication models. Security Operations • Lead security investigations and root-cause analysis. • Define detection use cases and response playbooks. • Conduct security reviews for major releases and platform changes. Job Requirements Required Skills • Strong OCI security expertise. • Advanced Palo Alto NGFW administration. • F5 BIG-IP (LTM/WAF) administration. • Advanced GitLab DevSecOps implementation. • Terraform and Pulumi. • Kubernetes security. • HashiCorp Vault. • Keycloak IAM and federation. • OPA and Policy-as-Code frameworks. Preferred Certifications • CISSP • CCSP • PCNSE • OCI Security Professional • CKS • HashiCorp Vault Associate • Terraform Associate

Job Requirements Required Skills Strong OCI security expertise. Advanced Palo Alto NGFW administration. F5 BIG-IP (LTM/WAF) administration. Advanced GitLab DevSecOps implementation. Terraform and Pulumi. Kubernetes security. HashiCorp Vault. Keycloak IAM and federation. OPA and Policy-as-Code frameworks. Preferred Certifications CISSP CCSP PCNSE OCI Security Professional CKS HashiCorp Vault Associate Terraform Associate

Cloud Security Architecture Lead cloud security posture management and configuration compliance initiatives. Define cloud security standards and reference architectures. Lead implementation of Infrastructure as Code security controls. Network & Zero Trust Security Design and manage Palo Alto NGFW security architecture. Implement F5 WAF and application delivery security controls. Design Zero Trust segmentation and micro-segmentation strategies. Establish secure access models for cloud-native platforms. Kubernetes & Container Security Lead Kubernetes security architecture and governance. Implement Kubernetes RBAC, Network Policies, Admission Controllers, Pod Security Controls. Deploy and manage Falco runtime security monitoring. Implement Istio service mesh security and mTLS. DevSecOps Leadership Architect GitLab DevSecOps pipelines. Implement SAST, DAST, SCA, IaC Scanning, Secrets Detection, Policy as Code. Define automated security quality gates. Lead secure SDLC initiatives. Identity & Secrets Management Design enterprise authentication and authorization using Keycloak. Implement Vault-based secrets lifecycle management. Support workload identities and cloud-native authentication models. Security Operations Lead security investigations and root-cause analysis. Define detection use cases and response playbooks. Conduct security reviews for major releases and platform changes.