Description

You will design and implement application security across cloud and data platforms.

Responsibilities

• Perform threat models (STRIDE) for web/API tiers, TIBCO integrations, data pipelines, and database migration flows to Exadata on AWS.
• Embed security controls into the SDLC by codifying policies for SAST/DAST/SCA, container/IaC scanning, and enforcing approval workflows in CI/CD.
• Design identity and access patterns, implementing least-privilege IAM roles, fine-grained segmentation, and cross-account access governance.
• Define network security architecture, covering VPC design, segmentation, Security Groups/NACLs, PrivateLink, and WAF/Shield policies.
• Establish data protection strategies, including KMS/HSM key hierarchies, envelope encryption, and TDE for Oracle.

Required Skills

• 5+ years of experience in security architecture.
• Proven experience migrating large application portfolios from on-prem to AWS, including Java/.NET and Oracle 19c to Exadata on AWS.
• Demonstrated design/implementation of AWS Landing Zone, Organizations, SCP guardrails, and multi-account segmentation.
• Practical use of AWS security services: IAM, KMS, Secrets Manager, GuardDuty, Security Hub, CloudTrail, Config.
• Container security implementation on EKS/ECS using IRSA, network policies, and admission controls (OPA/Gatekeeper/Kyverno).
• CI/CD security automation integrating SAST/DAST/SCA, IaC scanners (Terraform/CFN), and policy-as-code.
• Strong knowledge of AWS network architecture: VPCs, PrivateLink, Transit Gateway, and zero-trust patterns.
• Experience securing database migrations, covering encryption in transit/at rest and privileged access.
• Familiarity with TIBCO ESB security patterns, TLS/mTLS, and credential vaulting.

Key Skills

Education

Any Gradute