مهندس أمني أول (Qiwa Senior Security Engineer)

Job Summary

The Senior Cybersecurity Engineer is responsible for designing and enhancing cloud security architecture, network security, and DevSecOps controls on OCI and cloud-native platforms. This role leads security engineering efforts and collaborates closely with development, platform, and infrastructure teams.

Responsibilities

• Design secure OCI architectures and landing zones.
• Lead initiatives for cloud security posture management and compliance.
• Define cloud security standards and reference architectures.
• Implement Infrastructure as Code security controls.
• Design and manage Palo Alto NGFW security architecture and F5 WAF controls.
• Develop Zero Trust segmentation and secure access models for cloud-native platforms.
• Lead Kubernetes security architecture, including RBAC, network policies, admission controllers, pod security, Falco monitoring, and Istio service mesh security.
• Architect GitLab DevSecOps pipelines with SAST, DAST, SCA, IaC scanning, secrets detection, and policy as code.
• Design enterprise authentication and authorization with Keycloak and manage secrets lifecycle using Vault.
• Lead security investigations, define detection use cases, and conduct security reviews for releases and platform changes.

Requirements

• Strong expertise in OCI security.
• Advanced administration of Palo Alto NGFW.
• Experience with F5 BIG-IP (LTM/WAF) administration.
• Advanced GitLab DevSecOps implementation skills.
• Knowledge of Terraform and Pulumi.
• Kubernetes security expertise.
• Experience with HashiCorp Vault.
• Familiarity with Keycloak IAM and federation.
• Experience with OPA and Policy-as-Code frameworks.
• Preferred certifications include CISSP, CCSP, PCNSE, OCI Security Professional, CKS, HashiCorp Vault Associate, and Terraform Associate.

We refresh listings regularly, but some roles close early on the source platform.