Senior Platform Security Specialist

About the role

Bir Ecosystem is looking for a Senior Platform Security Specialist to strengthen the security of its cloud and on‑premise infrastructure. You will work closely with DevOps, infrastructure, and development teams to embed security best practices throughout the lifecycle of our platforms.

Key responsibilities

• Design, monitor, and maintain secure cloud and on‑premise infrastructure environments.
• Manage Linux‑based systems and services to ensure high availability, performance, and security.
• Implement and maintain security controls across AWS, Azure, and other cloud platforms.
• Operate network security solutions including firewalls, VPNs, routing, segmentation, WAF, and access‑control policies.
• Conduct vulnerability assessments, security hardening, patch management, and incident response.
• Develop Infrastructure as Code (IaC) and automation using Terraform, Ansible, and scripting languages.
• Integrate security practices into CI/CD pipelines and system architecture.
• Participate in troubleshooting, root‑cause analysis, and performance optimisation for security‑related incidents.
• Maintain technical documentation, operational procedures, and security standards.
• Ensure compliance with ISO 27001, NIST, and internal security policies.
• Research emerging security technologies and recommend improvements to the overall security posture.

Required profile

• Strong knowledge of AWS and Microsoft Azure cloud platforms.
• Hands‑on experience with Linux installation, configuration, LVM, and services such as firewall, Apache, Nginx, HAProxy.
• Solid understanding of networking fundamentals (subnetting, routing, DNS).
• Experience with container orchestration (Kubernetes, EKS) and micro‑services architectures.
• Familiarity with DevOps tools like Terraform and Ansible; certifications in AWS/Azure security are a plus.
• Practical experience with IAM, RBAC, VPC, VPN, security groups, NSG, WAF, CSPM/CNAPP solutions.
• Knowledge of Zero Trust architecture, encryption, key management, and DevSecOps practices.

Required skills

• AWS
• Microsoft Azure
• Linux
• Terraform
• Ansible
• Scripting (Bash/Python)
• Kubernetes / EKS
• Firewall, Apache, Nginx, HAProxy
• IAM / RBAC
• VPC, VPN, Subnetting, Routing, DNS
• Security Groups, NSG, WAF
• CSPM, CNAPP
• Zero Trust
• Encryption & Key Management
• ISO 27001, NIST