Security Engineering Expert
Takamol Holding
Role:We are looking for an experienced Security Engineering Expert to design, implement, and enhance security solutions across Oracle Cloud Infrastructure (OCI) and cloud-native environments.
The role focuses on cloud security, Kubernetes security, DevSecOps, identity and access management, and network security. The ideal candidate will have strong hands-on technical experience and the ability to lead complex security engineering initiatives while working closely with cloud, platform, infrastructure, and development teams.
Key Responsibilities:
Cloud Security Architecture
Design and implement secure cloud architectures across Oracle Cloud Infrastructure (OCI).
Develop and maintain cloud security standards, frameworks, and best practices.
Conduct security architecture reviews and recommend improvements.
Support cloud security transformation initiatives and security risk assessments.
Design secure hybrid-cloud and cloud-native environments.
Kubernetes & Cloud-Native Security
Implement and enhance security controls across Kubernetes and containerized environments.
Design secure container and service mesh architectures.
Implement security solutions using CNCF technologies such as Istio, Envoy, Falco, and OPA.
Support Kubernetes security hardening, workload protection, and micro-segmentation.
Identify and address security risks across cloud-native platforms.
DevSecOps & Security Automation
Integrate security controls into CI/CD pipelines using GitLab.
Implement and maintain security scanning tools, including SAST, DAST, SCA, and secrets detection.
Implement Infrastructure as Code (IaC) security controls using Terraform or Pulumi.
Automate security processes and improve security monitoring capabilities.
Work closely with DevOps and development teams to embed security throughout the software development lifecycle.
Identity & Access Management
Design and implement IAM solutions using Keycloak.
Manage authentication, authorization, Single Sign-On (SSO), and identity federation.
Implement secure secrets management solutions using HashiCorp Vault.
Support workload identity and access security across cloud environments.
Network Security & Zero Trust
Design and implement network security solutions using Palo Alto NGFW and F5 BIG-IP/WAF.
Support the implementation of Zero Trust security principles.
Implement network segmentation and secure access controls.
Conduct threat modeling and identify potential security vulnerabilities.
Security Engineering & Technical Leadership
Provide technical guidance to security engineers and cross-functional teams.
Lead complex security engineering projects and technical improvements.
Investigate security issues and support incident response activities.
Collaborate with cloud, infrastructure, platform, and development teams to ensure secure system design.
Evaluate emerging security technologies and recommend improvements.
Qualifications:
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
6–9 years of relevant experience in Cybersecurity Engineering, Cloud Security, or Security Architecture.
Strong hands-on experience in designing, implementing, and securing cloud-native environments.
Proven experience working with enterprise cloud infrastructure and security technologies.
Strong analytical, problem-solving, communication, and technical leadership skills.
Required Technical Skills:
Strong experience with Oracle Cloud Infrastructure (OCI) and cloud security architecture.
Hands-on experience with Kubernetes Security, container security, and cloud-native environments.
Experience implementing DevSecOps security controls within CI/CD pipelines.
Knowledge of GitLab CI/CD, SAST, DAST, SCA, and secrets detection.
Experience with Infrastructure as Code (IaC) tools such as Terraform.
Strong understanding of network security, firewalls, and secure network architecture.
Knowledge of IAM, authentication, authorization, and access management.
Understanding of Zero Trust Architecture, threat modeling, and security best practices.
Preferred Technical Skills:
Experience with Palo Alto NGFW and F5 BIG-IP/WAF.
Hands-on experience with Keycloak IAM and HashiCorp Vault.
Familiarity with CNCF security technologies, including Istio, Envoy, Falco, and OPA.
Experience with Pulumi and security automation tools.
Knowledge of cloud-native security posture management and security observability.
Preferred Certifications:
CISSP – Certified Information Systems Security Professional
CCSP – Certified Cloud Security Professional
OCI Security Professional
CKS – Certified Kubernetes Security Specialist
CKA – Certified Kubernetes Administrator
PCNSE – Palo Alto Networks Certified Network Security Engineer
GIAC Cloud Security Certifications
HashiCorp Vault Associate
HashiCorp Terraform Associate
AWS or Azure Security Certifications
