Define and implement the security blueprint for architecture
Design and oversee secure integration patterns between Mainframe Security and Cloud Identity Providers
Lead the implementation of SAST, DAST, and SCA within CI/CD pipeline
Define encryption, masking, and tokenization strategies for sensitive data
Evaluate the performance impact of security controls
Configure and audit security posture in Azure
Enforce security standards for API Gateways
Establish logging and monitoring strategies

At least 4-5 years of experience in Hybrid Infrastructure & Legacy Security
Deep understanding of RACF (or ACF2/Top Secret)
Experience securing data extraction from DB2 and VSAM file structures
Advanced knowledge of AT-TLS, SSH tunneling, and secure file transfer (SFTP/FTPS)
Extensive experience hardening Azure services
Security configuration for PostgreSQL and distributed databases
Design of Hub-and-Spoke architectures, Private Endpoints, and WAF configurations
Advanced knowledge of the Spring Security ecosystem
Ability to identify security flaws in Java and provide guidance on secure coding practices
Hands-on experience integrating security tools into automated pipelines
Implementation of AES-256, RSA, and ECC
Ability to profile application performance to minimize latency

Security Engineer – Modernization, Hybrid Cloud

Key skills