Security Engineering Expert

About the Role

Takamol Holding is seeking an experienced Security Engineering Expert to join their team in Riyadh, Saudi Arabia. This full-time role involves designing, implementing, and enhancing security solutions across Oracle Cloud Infrastructure (OCI) and cloud-native environments. The position focuses on critical areas such as cloud security, Kubernetes security, DevSecOps, identity and access management, and network security.

Key Responsibilities

• Design and implement secure cloud architectures across Oracle Cloud Infrastructure (OCI), developing and maintaining cloud security standards and best practices.
• Conduct security architecture reviews, recommend improvements, and support cloud security transformation initiatives and risk assessments.
• Implement and enhance security controls across Kubernetes and containerized environments, including designing secure container and service mesh architectures.
• Implement security solutions using CNCF technologies such as Istio, Envoy, Falco, and OPA, supporting Kubernetes security hardening and workload protection.
• Integrate security controls into CI/CD pipelines using GitLab and implement security scanning tools (SAST, DAST, SCA, secrets detection).
• Implement Infrastructure as Code (IaC) security controls using Terraform or Pulumi, automating security processes and improving monitoring capabilities.
• Design and implement IAM solutions using Keycloak, managing authentication, authorization, SSO, and identity federation.
• Implement secure secrets management solutions using HashiCorp Vault and support workload identity and access security across cloud environments.
• Design and implement network security solutions using Palo Alto NGFW and F5 BIG-IP/WAF, supporting the implementation of Zero Trust security principles.
• Conduct threat modeling, identify potential security vulnerabilities, and implement network segmentation and secure access controls.

Technical Leadership and Collaboration

• Provide technical guidance to security engineers and cross-functional teams.
• Lead complex security engineering projects and technical improvements.
• Investigate security issues and support incident response activities.
• Collaborate with cloud, infrastructure, platform, and development teams to ensure secure system design.
• Evaluate emerging security technologies and recommend improvements.

Required Experience

Candidates should possess 5 to 10 years of experience in security engineering, with a strong hands-on technical background. The role requires the ability to lead complex security engineering initiatives and work effectively with various technical teams.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia. The role involves close collaboration with cloud, platform, infrastructure, and development teams to embed security throughout the software development lifecycle.