Job Closed

This listing is no longer active.

Visa logo
Visa

Based in Foster City, California, Visa is a global payments technology organization. Visa was founded in 1958, coinciding with Bank of America’s launch of the

Senior Cybersecurity Engineer

Location

Brazil

Posted

80 days ago

Salary

0

Seniority

Senior

Bachelor Degree6 yrs expEnglishDistributed SystemsKubernetesTerraform

Job Description

Senior Cybersecurity Engineer

Visa

• Designing, implementing, and operating identity and authorization platforms used across internal and external services • Defining and evolving authentication and authorization patterns based on OAuth 2.0, OpenID Connect, and token-based security • Supporting and improving API security using API Gateway technologies, preferably Kong, including authentication flows, rate limiting, and policy enforcement • Collaborating with engineering teams to securely integrate identity solutions into APIs and services • Building and maintaining infrastructure using Infrastructure as Code (Terraform) • Operating and securing Kubernetes-based workloads and identity-related services • Contributing to cloud architecture decisions with a strong focus on security, resilience, and scalability • Partnering with DevOps and SRE teams to improve observability, incident response, and operational excellence • Participating in security reviews, threat modeling, and architecture design discussions • Defining best practices, documentation, and reference architectures for identity and access management • Continuously learning and staying current with modern identity, cloud security, and platform engineering practices

Job Requirements

  • 6 or more years of work experience with a Bachelor's Degree or 4 or more years of relevant experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or up to 3 years of relevant experience with a PhD
  • Strong experience securing API Gateway platforms , with deep familiarity in architectures based on Kong Gateway (Enterprise or OSS) , including ingress and egress traffic patterns in cloud‑native environments.
  • Proven expertise in Identity and service‑to‑service security , including the design, enforcement, and validation of mTLS‑based communication , certificate lifecycle management, and trust boundaries across distributed systems.
  • Hands‑on experience working with Public Key Infrastructure (PKI) concepts and implementations, including certificate issuance, rotation, revocation, and integration with gateways and workloads.
  • Deep understanding of API security controls implemented at the gateway layer, such as OAuth2, OpenID Connect, JWT validation, client credentials, rate limiting, traffic filtering, and abuse prevention.
  • Strong experience securing Kubernetes‑based platforms , including API Gateway deployments running inside clusters, with knowledge of namespaces, workload isolation, network policies, and integration with service mesh when applicable.
  • Solid experience reviewing and influencing Infrastructure as Code (IaC) used to provision API Gateways, identity components, and supporting infrastructure, particularly using Terraform and GitOps‑style workflows.
  • Proven ability to perform security assessments, threat modeling, and architectural reviews for gateway and identity platforms, identifying systemic risks, misconfigurations, and scalability concerns.
  • Strong understanding of observability and security monitoring for gateways and identity services, including logs, metrics, and traces used to detect anomalies, investigate incidents, and support audits.
  • Excellent analytical and problem‑solving skills, with strong attention to detail when operating in high‑traffic, multi‑environment, and multi‑region platforms .
  • Ability to clearly communicate security risks, architectural decisions, and remediation strategies to engineering teams, platform owners, and non‑technical stakeholders.
  • Demonstrated ability to lead and influence cross‑functional teams , including platform engineering, SRE, and application teams, ensuring consistent security baselines across the API and identity ecosystem.

Benefits

  • Employees can work remotely

Related Categories

Related Job Pages

More Security Engineer Jobs

Nagarro logo

SAP BTP Security Consultant

Nagarro

Nagarro (Frankfurt: NA9) is a leader in digital product engineering and drives technology-led business breakthroughs.

Full TimeRemoteTeam 10,001+Since 1996H1B Sponsor

• Design and implement SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS) architectures • Integrate SAP BTP with corporate IdPs (Azure AD, Entra ID, AD, LDAP, SAML, OAuth2, OpenID Connect) • Configure Single Sign-On (SSO), MFA, Conditional Access, and Trust configurations • Manage user lifecycle, role mapping, and automated provisioning/de-provisioning across SAP systems Security & Compliance • Implement and govern SAP Cloud Identity Services (CIS) best practices • Define security standards for BTP applications, APIs, AI services, and integrations • Support compliance requirements (ISO 27001, GDPR, SOC, internal security policies) • Conduct security reviews, risk assessments, and audits for SAP BTP landscapes BTP & AI Enablement • Secure AI-enabled SAP services (e.g., SAP AI Core, AI Launchpad, Joule, custom AI apps on BTP) • Ensure secure access to APIs, data, and AI models using OAuth2, XSUAA, and service bindings • Collaborate with SAP architects, AI teams, and developers to embed security by design Operations & Governance • Monitor and troubleshoot authentication, provisioning, and authorization issues • Establish identity governance, access reviews, and logging/monitoring strategies • Create security documentation, standards, and operational runbooks

Romania
Job Closed
CNO Financial Group, Inc. logo

Sr IT Identity Security Engineer

CNO Financial Group, Inc.

CNO Financial Group, Inc. (NYSE: CNO) secures the future of middle-income America. CNO provides life and health insurance, annuities, financial services and workforce benefits solutions through our family of brands, including Bankers Life, Colonial Penn, Optavise and Washington National. Our customers work hard to save for the future, and we help protect their health, income and retirement needs with 3.3 million policies and more than $38.3 billion in total assets. We are financially strong and well positioned for continued growth, grounded in our core values of People Focused, Integrity, Customer Driven, and Excellence. We have offices in more than 220 communities in the U.S., including our headquarters in Carmel, Indiana, and corporate offices in Birmingham, Chicago, Orlando and Milwaukee. At CNO Financial Group, we’re always looking forward—to the security and stability we help create for our insurance brands’ customers, and the growth we create within our own company. We're looking for ambitious people who want to do more. We'll provide you with opportunities to grow your skills through challenging professional experiences. If you're looking for a culture that encourages development, helps you reach your potential, and rewards you for your contribution, then CNO Financial Group is right for you. For more information, visit CNOinc.com.

OtherRemoteTeam 201-500

Job Details The stated pay range is based on a national average location. Actual salary is determined by factors including relevant work experience, skills and location. This position is bonus-eligible. CNO Financial Group’s IT Team is hiring a Sr. IT Identity Security Engineer to serve as the senior Identity and Access Management (IAM) Identity Automation (IA) security expert and communicate security-related concepts to technical and non-technical team members as it relates to automated Identity provisioning and governance. The Sr IT Security Engineer will also lead the design and implementation of IAM IA security tools and technologies for the company. This role monitors and controls performance and status of all security systems related to the IA program. This is your opportunity to optimize system resources to enhance the effectiveness and security of the IA environment. As a Sr. IT Identity Security Engineer, your responsibilities will include: - Planning, designing, implementing, and maintaining identity security-related technologies primarily using CyberArk - Participating in projects as required; analyzing, designing, developing, and implementing security solutions which protect the information assets while enabling business functionality. - Utilizing security software and hardware tools to identify and diagnoses problems affecting identity information security tools and systems providing 2nd and 3rd tier operational support. - Providing identity information security expertise and consulting to internal IT, business system owners, and other stakeholders. - Performing product and solution life cycle management ensuring capacity, integrity and availability of all security systems. - Aligning technologies to support overall strategy and information security framework specifically related to the identity automation program. - Ensuring new and existing identity products conform to information security policies, standards, and best practices. - Conducting research on emerging technologies in support of enterprise operations. - Reviewing new and existing system designs for compliance with security standards and best practices. The Sr. IT Identity Security Engineer position is well-suited for you if you: - Possess strong knowledge in Identity products and Privileged Access solutions - Have a strong background in systems administration - Understand of security concepts, practices, and procedures - Have a strong understanding of information security technologies (e.g., virus detection, firewall, content filtering, VPNs, IDS/IPS) - Can demonstrate implementation of access alerting, monitoring and dashboard integration preferably with Splunk or similar SEIM products What you’ll need: - Typically requires a Bachelor’s degree in Information Systems/Business or related field, or equivalent professional experience - Typically requires a minimum of 5 years of experience in cybersecurity or related technical discipline (infrastructure, etc.) - Prior experience with CyberArk or similar PAM products What will set you apart: - Prior experience with SailPoint and/or Ping - Applicable security or CISSP certifications preferred. - A passion for staying up to date on emerging technologies and industry trends - Prior experience in highly regulated organizations. The Company offers the following benefits for this position, subject to applicable eligibility requirements: - Medical insurance - Dental insurance - Vision insurance - 401(k) retirement plan with company match - Short-term & long-term disability insurance - Paid time-off and corporate holidays, - Paid parental leave - Company paid life insurance Click on this link for additional information. CNO embraces flexibility and encourages you to work where you’re most productive. Associates who live within a 60-mile radius of a corporate office (Birmingham, Carmel, Chicago, Orlando and Milwaukee) have access to come into that office.  Associates who live outside of a 60-mile radius of a corporate office (Birmingham, Carmel, Chicago, Orlando and Milwaukee) may perform this role full-time work from home (WFH) from any US based location, as long as you are willing to work central or eastern time zone hours.   All associates may be asked to travel to varying corporate offices periodically. Work cannot be performed from outside of the United States. CNO provides life and health insurance, annuities, financial services, and workforce benefits solutions through our family of brands and supported by our associates and agents. Our customers work hard to save for the future, and we help protect their health, income and retirement needs with 3.2 million policies and more than $35 billion in total assets. Our 3,400 associates, 8,600 exclusive agents and independent partner agents guide individuals, families and businesses through a lifetime of financial decisions. We are financially strong and well positioned for continued growth, and we are grounded in our core values of People Focused, Integrity, Customer Driven, and Excellence. We have offices in more than 260 communities in the U.S., including our headquarters in Carmel, Indiana, and corporate offices in Birmingham, Chicago, Orlando and Milwaukee. At CNO Financial Group, we’re always looking forward—to the security and stability we help create for our insurance brands’ customers, and the growth we create within our own company. We're looking for ambitious people who want to do more. We'll provide you with opportunities to grow your skills through challenging professional experiences. If you're looking for a culture that encourages development, helps you reach your potential, and rewards you for your contribution, then CNO Financial Group is right for you. For more information, visit CNOinc.com. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. Compensation Pay Range: $107,800.00 - $161,800.00 Annual We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

United States
$107K - $161K / year
Job Closed
Manpower/itec logo

Functional Lead, Firewall Policy Management

Manpower/itec

Since 1999, ITEC has delivered mission-critical support to the DoD and Intelligence Community. Now part of ManpowerGroup Public Sector (MGPS), we continue that work with expanded capabilities.

Role Description The Functional Lead will be responsible for collaborating with multiple internal stakeholders to assist with functional planning, establish scope/requirements, solution design, documentation, and testing solutions. In addition, the Functional Lead will be responsible for reviewing and managing updates to business processes to achieve project goals and will help to serve as a liaison between the business stakeholders and project development teams to implement the project scope. Job Responsibilities - Collaborate with stakeholders to identify scope/requirements for the network enhancements. - Review existing policies and identify requirements and support design, and test of network updates. - Document requirements, design, test cases (and result) and manage review and updates. - Quality Assurance/Test support Post implementation support/transition. Qualifications - Bachelor’s degree Requirements - Functional Requirements Analysis – Intermediate - Business Requirements – Intermediate - Network and Service Management – Intermediate - Network Infrastructures – Intermediate - Stakeholder Engagement – Intermediate Desired Skills - Agile Methodologies – Intermediate - Business Process Design – Advanced - Risk Management – Advanced Benefits Employees hired through this process will join MGPS and receive a comprehensive benefits package and competitive pay. Company Description Since 1999, ITEC has delivered mission-critical support to the DoD and Intelligence Community. Now part of ManpowerGroup Public Sector (MGPS), we continue that work with expanded capabilities.

United States
Job Closed
Tyto Athene, LLC logo

Cloud Security Engineer – AWS, GCP

Tyto Athene, LLC

At Tyto Athene, we harness the power of technology to provide solutions that shape the future.

Full TimeRemoteTeam 1,001-5,000Since 2018H1B No Sponsor

• Perform systems administration and maintenance including patching, vulnerability scanning, compliance scanning and remediation, backups, and recovery for cloud workloads • Support AWS & GCP environments • Configure, update, and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring • Troubleshoot issues across network, compute, application, and identity layers • Implement hardening and compliance controls using CIS Benchmarks • Remediate vulnerabilities identified by tools such as Tenable and Trivy • Provide quality assurance feedback during system deployments • Collaborate with Security Analysts to ensure uninterrupted delivery of security services • Create and maintain documentation including network diagrams and SOPs • Support client communications, deliverables, and issue resolution • Support and mentor junior engineers

Virginia
$110K - $140K / year