Qiwa Senior Security Engineer

About the Role

Takamol Holding is seeking a Qiwa Senior Security Engineer to join their team in Riyadh, Saudi Arabia. This full-time role involves designing, implementing, and optimizing cloud security architecture, network security solutions, and DevSecOps controls across OCI and cloud-native platforms. The Senior Cybersecurity Engineer will provide technical leadership for security engineering initiatives and serve as the primary security partner for development, platform, and infrastructure teams, requiring 5-10 years of relevant experience.

Key Responsibilities

• Design secure OCI architectures and landing zones, and lead cloud security posture management and configuration compliance initiatives.
• Define cloud security standards and reference architectures, and lead the implementation of Infrastructure as Code security controls.
• Design and manage Palo Alto NGFW security architecture, implement F5 WAF and application delivery security controls.
• Design Zero Trust segmentation and micro-segmentation strategies, and establish secure access models for cloud-native platforms.
• Lead Kubernetes security architecture and governance, implementing Kubernetes RBAC, Network Policies, Admission Controllers, and Pod Security Controls.
• Deploy and manage Falco runtime security monitoring, and implement Istio service mesh security and mTLS.
• Architect GitLab DevSecOps pipelines, implementing SAST, DAST, SCA, IaC Scanning, Secrets Detection, and Policy as Code.
• Define automated security quality gates and lead secure SDLC initiatives.
• Design enterprise authentication and authorization using Keycloak, implement Vault-based secrets lifecycle management, and support workload identities and cloud-native authentication models.
• Lead security investigations and root-cause analysis, define detection use cases and response playbooks, and conduct security reviews for major releases and platform changes.

Required Skills and Experience

Candidates should possess 5-10 years of experience and demonstrate proficiency in the following areas:

• Strong OCI security expertise.
• Advanced Palo Alto NGFW administration.
• F5 BIG-IP (LTM/WAF) administration.
• Advanced GitLab DevSecOps implementation.
• Proficiency with Terraform and Pulumi.
• Expertise in Kubernetes security.
• Experience with HashiCorp Vault.
• Knowledge of Keycloak IAM and federation.
• Familiarity with OPA and Policy-as-Code frameworks.

Preferred Certifications

• CISSP
• CCSP
• PCNSE
• OCI Security Professional
• CKS
• HashiCorp Vault Associate
• Terraform Associate

Work Environment

This is a full-time position based in Riyadh, Riyadh, Saudi Arabia. The role involves working closely with development, platform, and infrastructure teams to ensure robust security across all systems.