Senior Infrastructure and Application Security Specialist

About the role

The role focuses on deploying, configuring, and maintaining a wide range of security solutions across the organization’s IT infrastructure. You will work closely with development and operations teams to embed security controls throughout the software lifecycle.

Key responsibilities

• Deploy, configure, update, and maintain security solutions such as firewalls, IDS/IPS, WAF, NAC, VPN, PAM, EDR, DLP, proxy, CASB, and email security.
• Enforce secure network segmentation, access control practices, and monitor end‑to‑end data traffic.
• Conduct security testing on web and enterprise applications and integrate controls into CI/CD pipelines (DevSecOps).
• Plan and execute penetration tests, vulnerability scans, and configuration audits; analyze and prioritize remediation.
• Support SOC teams by analyzing alerts and contributing to incident response.
• Maintain security architecture diagrams, configuration checklists, and prepare technical reports.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Engineering, or Management (Master’s/MBA a plus).
• Minimum 3+ years of experience in IAM‑related roles with advanced knowledge of IAM solutions, frameworks, and architectures.
• Preferred certifications: CISSP, CISM, CIAM, Microsoft SC‑300, SailPoint, Okta.

Required skills

• Hands‑on experience with AD, LDAP, SSO, MFA, and PAM systems.
• Familiarity with access control models (RBAC, ABAC, PBAC) and IAM audit/compliance.
• Practical knowledge of security tools: firewalls, IDS/IPS, WAF, NAC, VPN, PAM, EDR, DLP, proxy, CASB, email security.
• Experience with secure configuration benchmarks (CIS, STIG) and automation of security processes.