Qiwa Senior Security Engineer

Job Summary

The Senior Cybersecurity Engineer is responsible for designing and enhancing cloud security architecture, network security, and DevSecOps controls on OCI and cloud-native platforms. This role leads security engineering efforts and collaborates closely with development, platform, and infrastructure teams.

Responsibilities

• Design secure OCI architectures and landing zones.
• Lead initiatives for cloud security posture management and compliance.
• Define cloud security standards and reference architectures.
• Implement Infrastructure as Code security controls.
• Design and manage Palo Alto NGFW security architecture and F5 WAF controls.
• Develop Zero Trust segmentation and secure access models for cloud-native platforms.
• Lead Kubernetes security architecture, including RBAC, network policies, admission controllers, pod security, Falco monitoring, and Istio service mesh security.
• Architect GitLab DevSecOps pipelines with SAST, DAST, SCA, IaC scanning, secrets detection, and policy as code.
• Design enterprise authentication and authorization with Keycloak and manage secrets lifecycle using Vault.
• Lead security investigations, define detection use cases, and conduct security reviews for releases and platform changes.

Requirements

• Strong expertise in OCI security.
• Advanced administration of Palo Alto NGFW.
• Experience with F5 BIG-IP (LTM/WAF) administration.
• Advanced GitLab DevSecOps implementation skills.
• Knowledge of Terraform and Pulumi.
• Kubernetes security expertise.
• Experience with HashiCorp Vault.
• Familiarity with Keycloak IAM and federation.
• Experience with OPA and Policy-as-Code frameworks.
• Preferred certifications include CISSP, CCSP, PCNSE, OCI Security Professional, CKS, HashiCorp Vault Associate, and Terraform Associate.

We refresh listings regularly, but some roles close early on the source platform.