Job Description
The Senior Cybersecurity Engineer is responsible for designing, implementing, and optimizing cloud security architecture, network security solutions, and DevSecOps controls across OCI and cloud-native platforms. The role provides technical leadership for security engineering initiatives and acts as the primary security partner for development, platform, and infrastructure teams.
Key Responsibilities Cloud Security Architecture
- Design secure OCI architectures and landing zones.
- Lead cloud security posture management and configuration compliance initiatives.
- Define cloud security standards and reference architectures.
- Lead implementation of Infrastructure as Code security controls.
Network & Zero Trust Security
- Design and manage Palo Alto NGFW security architecture.
- Implement F5 WAF and application delivery security controls.
- Design Zero Trust segmentation and micro-segmentation strategies.
- Establish secure access models for cloud-native platforms.
Kubernetes & Container Security
- Lead Kubernetes security architecture and governance.
- Implement:
- Kubernetes RBAC
- Network Policies
- Admission Controllers
- Pod Security Controls
- Deploy and manage Falco runtime security monitoring.
- Implement Istio service mesh security and mTLS.
DevSecOps Leadership
- Architect GitLab DevSecOps pipelines.
- Implement:
- SAST
- DAST
- SCA
- IaC Scanning
- Secrets Detection
- Policy as Code
- Define automated security quality gates.
- Lead secure SDLC initiatives.
Identity & Secrets Management
- Design enterprise authentication and authorization using Keycloak.
- Implement Vault-based secrets lifecycle management.
- Support workload identities and cloud-native authentication models.
Security Operations
- Lead security investigations and root-cause analysis.
- Define detection use cases and response playbooks.
- Conduct security reviews for major releases and platform changes.
Job Requirements
Required Skills
- Strong OCI security expertise.
- Advanced Palo Alto NGFW administration.
- F5 BIG-IP (LTM/WAF) administration.
- Advanced GitLab DevSecOps implementation.
- Terraform and Pulumi.
- Kubernetes security.
- HashiCorp Vault.
- Keycloak IAM and federation.
- OPA and Policy-as-Code frameworks.
Preferred Certifications
- CISSP
- CCSP
- PCNSE
- OCI Security Professional
- CKS
- HashiCorp Vault Associate
- Terraform Associate