We are looking for an experienced Security Engineering Expert to design, implement, and enhance security solutions across Oracle Cloud Infrastructure (OCI) and cloud-native environments.
The role focuses on cloud security, Kubernetes security, DevSecOps, identity and access management, and network security. The ideal candidate will have strong hands-on technical experience and the ability to lead complex security engineering initiatives while working closely with cloud, platform, infrastructure, and development teams.
Key Responsibilities:
Cloud Security Architecture
- Design and implement secure cloud architectures across Oracle Cloud Infrastructure (OCI).
- Develop and maintain cloud security standards, frameworks, and best practices.
- Conduct security architecture reviews and recommend improvements.
- Support cloud security transformation initiatives and security risk assessments.
- Design secure hybrid-cloud and cloud-native environments.
Kubernetes & Cloud-Native Security
- Implement and enhance security controls across Kubernetes and containerized environments.
- Design secure container and service mesh architectures.
- Implement security solutions using CNCF technologies such as Istio, Envoy, Falco, and OPA.
- Support Kubernetes security hardening, workload protection, and micro-segmentation.
- Identify and address security risks across cloud-native platforms.
DevSecOps & Security Automation
- Integrate security controls into CI/CD pipelines using GitLab.
- Implement and maintain security scanning tools, including SAST, DAST, SCA, and secrets detection.
- Implement Infrastructure as Code (IaC) security controls using Terraform or Pulumi.
- Automate security processes and improve security monitoring capabilities.
- Work closely with DevOps and development teams to embed security throughout the software development lifecycle.
Identity & Access Management
- Design and implement IAM solutions using Keycloak.
- Manage authentication, authorization, Single Sign-On (SSO), and identity federation.
- Implement secure secrets management solutions using HashiCorp Vault.
- Support workload identity and access security across cloud environments.
Network Security & Zero Trust
- Design and implement network security solutions using Palo Alto NGFW and F5 BIG-IP/WAF.
- Support the implementation of Zero Trust security principles.
- Implement network segmentation and secure access controls.
- Conduct threat modeling and identify potential security vulnerabilities.
Security Engineering & Technical Leadership
- Provide technical guidance to security engineers and cross-functional teams.
- Lead complex security engineering projects and technical improvements.
- Investigate security issues and support incident response activities.
- Collaborate with cloud, infrastructure, platform, and development teams to ensure secure system design.
- Evaluate emerging security technologies and recommend improvements.
Qualifications:
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- 6–9 years of relevant experience in Cybersecurity Engineering, Cloud Security, or Security Architecture.
- Strong hands-on experience in designing, implementing, and securing cloud-native environments.
- Proven experience working with enterprise cloud infrastructure and security technologies.
- Strong analytical, problem-solving, communication, and technical leadership skills.
Required Technical Skills:
- Strong experience with Oracle Cloud Infrastructure (OCI) and cloud security architecture.
- Hands-on experience with Kubernetes Security, container security, and cloud-native environments.
- Experience implementing DevSecOps security controls within CI/CD pipelines.
- Knowledge of GitLab CI/CD, SAST, DAST, SCA, and secrets detection.
- Experience with Infrastructure as Code (IaC) tools such as Terraform.
- Strong understanding of network security, firewalls, and secure network architecture.
- Knowledge of IAM, authentication, authorization, and access management.
- Understanding of Zero Trust Architecture, threat modeling, and security best practices.
Preferred Technical Skills:
- Experience with Palo Alto NGFW and F5 BIG-IP/WAF.
- Hands-on experience with Keycloak IAM and HashiCorp Vault.
- Familiarity with CNCF security technologies, including Istio, Envoy, Falco, and OPA.
- Experience with Pulumi and security automation tools.
- Knowledge of cloud-native security posture management and security observability.
Preferred Certifications:
- CISSP – Certified Information Systems Security Professional
- CCSP – Certified Cloud Security Professional
- OCI Security Professional
- CKS – Certified Kubernetes Security Specialist
- CKA – Certified Kubernetes Administrator
- PCNSE – Palo Alto Networks Certified Network Security Engineer
- GIAC Cloud Security Certifications
- HashiCorp Vault Associate
- HashiCorp Terraform Associate
- AWS or Azure Security Certifications
