Qiwa Senior Security Engineer

Role overview

Cloud and network security

• Design secure OCI architectures and landing zones; lead cloud posture management and configuration compliance.
• Define cloud security standards and reference architectures; lead implementation of Infrastructure as Code security controls.
• Design and manage Palo Alto NGFW architecture; implement F5 WAF and application-delivery security controls.
• Design Zero Trust segmentation and micro-segmentation and establish secure cloud-native access models.

Kubernetes and DevSecOps

• Lead Kubernetes security architecture and governance; implement RBAC, network policies, admission controllers, and pod security controls.
• Deploy and manage Falco runtime security monitoring; implement Istio service-mesh security and mTLS.
• Architect GitLab pipelines with SAST, DAST, SCA, IaC scanning, secrets detection, and Policy as Code.
• Define automated security quality gates and lead secure SDLC initiatives.

Identity and security operations

• Design Keycloak enterprise authentication and authorization; implement Vault secrets lifecycle management.
• Support workload identities and cloud-native authentication models.
• Lead investigations and root-cause analysis; define detection use cases and response playbooks.
• Review security for major releases and platform changes.

Required skills

• Strong OCI security expertise and advanced Palo Alto NGFW administration.
• F5 BIG-IP (LTM/WAF) administration and advanced GitLab DevSecOps implementation.
• Terraform and Pulumi; Kubernetes security; HashiCorp Vault; Keycloak IAM and federation.
• OPA and Policy-as-Code frameworks.

Preferred certifications

• Preferred certifications include CISSP, CCSP, PCNSE, OCI Security Professional, CKS, HashiCorp Vault Associate, and Terraform Associate.