Senior Cloud Security Engineer - Gcp/oci

Cloud Security Engineer

We are looking for a Cloud Security Engineer with mandatory experience in banking, fintech, or regulated sectors to lead the design and implementation of secure, compliant cloud infrastructures. The candidate must have a strong understanding of regulatory frameworks and enterprise-grade security controls, with the ability to operate in high-compliance environments.

Key Responsibilities:

• Own and implement cloud security architectures and landing-zone guardrails across network, identity, data, and logging layers.
• Secure configurations for databases, storage, serverless, and other cloud-native services.
• Design and enforce least-privilege IAM, including SSO (SAML/OIDC) and PAM workflows.
• Implement key and credential lifecycle management, including MFA, short-lived tokens, and machine identity governance.
• Ensure data protection via encryption at rest and in transit, along with tokenization where required.
• Define and enforce network segmentation, private connectivity, secure egress, and API security.
• Implement protections such as WAF, DDoS mitigation, and bot defense mechanisms.
• Establish and manage Zero Trust access models for users and services.
• Integrate security scanning tools (SAST, DAST, Secrets, IaC) into CI/CD pipelines.
• Maintain compliance and audit readiness for SAMA, NCA, ISO 27001, PCI DSS, SWIFT CSP.
• Develop and enforce policies-as-code, tagging standards, and exception workflows.
• Integrate and manage cloud logs within SIEM platforms (e.g., Splunk).
• Orchestrate cloud and container security scanning, track remediation SLAs, and collaborate with engineering teams.