Security Engineer (Modernization & Hybrid Cloud)
Hybrid · Lima, Lima Province, Peru
Job Summary
Security Engineer focusing on modernization and hybrid cloud, responsible for shaping secure-by-design architectures across mainframe-to-cloud environments. Role emphasizes designing and implementing security controls and policies, enabling secure integrations between Mainframe Security (RACF) and Cloud Identity Providers (Azure AD/Entra ID) with Zero Trust, leading SAST/DAST/SCA within CI/CD pipelines for high-concurrency Java apps, and defining encryption, masking, and tokenization strategies for data in DB2/VSAM as they move to cloud databases (PostgreSQL/SingleStore). You’ll optimize security performance (TLS handshakes, encryption overhead), harden cloud infrastructure (Azure), secure API gateways with OAuth2/OIDC, and establish logging/monitoring (SIEM/SOAR) across legacy and distributed systems. The role also covers security patterning for modernization, mentoring development squads, and ensuring security requirements accelerate migration to cloud while remaining compliant with banking regulations.
Required Qualifications
- Hybrid Infrastructure & Legacy Security: RACF (or ACF2/Top Secret) knowledge, resource profiles and user access management in COBOL/CICS environments; secure data extraction from DB2/VSAM during migration
- Cloud & Database Security: Azure hardening (AKS, Azure SQL, Key Vault, Azure Firewall); PostgreSQL and distributed databases with RLS and encryption at rest/in transit; Hub-and-Spoke networks; Private Endpoints; WAF
- Application Security & Development: Java security deep-dive; Spring Security; secure coding practices in COBOL; CI/CD integration of SAST/DAST/SCA; DevSecOps
- Cryptography & Performance: AES-256, RSA, ECC; HSM integration; minimize TLS overhead and payload encryption impact
- Security Performance & Modernization: security-controls design with minimal impact on banking/transaction speeds; modernization facilitator for cloud migration
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.