Qureos Mentor

Kingdom World Trading SPC

Role (Overall Accountability) He is responsible for the following: &bull; Administration, operations management, device monitoring, and technical support of the Security Systems of the bank pertaining to the Test and Development environment. &bull; Assisting the security operations team in evaluating, testing, and implementing new security products, projects, and services. &bull; Supporting IT Security Projects&rsquo; team members. The Security Systems referenced here comprise, but not limited to, the following system under the Test and Development environment: &bull; Firewalls &bull; Web Application Firewalls &bull; Web Filtering &bull; Unified Threat Management &bull; DDOS Mitigation &bull; Network &amp; Firewall Compliance Tools &bull; Network Monitoring &bull; Intrusion Prevention Systems &bull; Consolidated Endpoint Security, comprising: o Anti-Virus o Data Leak Prevention o Disk Encryption o Threat Prevention o Device Control o Endpoint Detection and Response o Adaptive Threat Prevention o Application Control o Change Control o File Integrity Monitoring &bull; Multi Factor Authentication System &bull; Database Activity Monitoring &bull; File and Folder Encryption &bull; Data Classification &bull; Content Scanning Solution Official Information Technology Department IT Security Operations Job Description This Document is classified as Official Page 2 of 3 Principal Accountabilities &bull; Installation, administration and monitoring of bank&rsquo;s security systems, and other new technologies that will be implemented in the future. &bull; Backup, patch, update, and upgrade the security systems of the bank, while adhering to the Change and Release Management procedures implemented in the bank. &bull; Perform system health checks for all Security devices on periodic basis. &bull; Ensure that a detailed impact analysis of any change request is carried out and viable and tested solution is recommended. &bull; Review and update management and procedure documents to ensure that all changes in the processes and systems are adequately documented and up to date. &bull; Manage AMC renewals for all IT security systems, devices and infrastructure. &bull; Coordinate with the auditors (internal, external, and CBO) and assisting them in performing their duties while auditing the security systems. &bull; Participate and lead new projects and initiatives related to IT security. &bull; Monitor security systems&rsquo; capacity utilization and plan for enhancements proactively. &bull; Monitor Internet usage and report exceptions. &bull; Generate MIS reports for all security components. &bull; Ensure availability of all security systems on 24*7 basis. &bull; Supervise and ensure that all DR failover and failback tests are carried out successfully. &bull; Coordinate with his superiors in resolving issues and complaints. &bull; Coordinate with internal teams and external vendors to resolve issues and/or to implement system changes. &bull; Ensure regular updates on progress are conveyed to superiors. &bull; Ensure high quality deliverables and work products are provided and meet commitments for the schedule on satisfying the bank&rsquo;s user needs. &bull; Must build a strong sense of commitment among all his team members to meet the user satisfaction levels. &bull; Ensure that appropriate corrective and preventive actions are undertaken and resolve problems as soon as they arise. Key Interaction Individual / Entity Purpose All users in the Bank For security administration and support. Official Information Technology Department IT Security Operations Job Description This Document is classified as Official Page 3 of 3 Personnel Specifications Must be a graduate in Computer Science, Information Systems or equivalent IT disciplines, with 4-6 years of experience in the IT Security discipline. The candidates should have strong technical background in the following areas: &bull; Master&rsquo;s Degree in Cyber Security is a plus. &bull; Certifications in Cyber security/ IT Security / Risk - CISSP, CISM, CISA, GIAC, CEH, CRISC etc is a plus. &bull; Must have good knowledge of Standards such as ISO 27001, ISO 27005, PCI-DSS, CoBIT etc. Product certification such as CCNP, PCNSE, is preferable. &bull; Product trainings/certifications based on other technologies such as Juniper, RSA, Proxy and IPS devices is preferred. &bull; Hands-on experience on installation, administration, trouble shooting and user support of security products such as firewall/VPN, IDS/IPS, proxy servers, content filtering SW etc. &bull; LAN/WAN networking technologies, communication topologies and TCP/IP and other Network protocols, etc. &bull; Intranet, Internet and other web technologies. &bull; Windows/Unix/Linux operating systems and internetworked environments. &bull; OS and DB hardening procedures (Windows/Unix/Linux and Oracle/SQL etc.) &bull; Documentation MIS preparation and reporting. &bull; Good communication and presentation skills with good command of spoken and written English. &bull; Good interpersonal relations with pleasing personality. Signature of the staff Date Signature of the line manager Date *******Job Type: Full-timePay: RO700.000 - RO1,400.000 per month

Security Engineer

The Project Technical Lead will lead the end-to-end technical implementation, migration and integration of a Sanction Screening vendor solution. The role ensures regulatory compliance, system stability, secure integration and business continuity across all customer and payment screening channels. Key Responsibilities: 1. Project Technical Leadership: &bull; Act as the single technical authority for the Sanction Screening project. &bull; Own all technical decisions across design, build, testing and go-live. &bull; Translate business, regulatory and operational requirements to detailed technical solutions 2. Project Implementation and Delivery: &bull; Act as the technical owner of the project from design through go-live. &bull; Coordinate all technical activities with vendor and system integrator teams &bull; Govern system builds and environment setup plans &bull; Ensure audit traceability and data integrity &bull; Manage Parallel run, final cutover and safe decommissioning of legacy system. 3. System Integration: &bull; Lead Integrations with: o Payment Platforms (SWIFT, RTGS, ACH, Instant Payments) o Enterprise Payment Hub o Customer/Business Channels o Faud Management Systems o Middleware / ESB / API gateway &bull; Ensure support for ISO 20022, SWIFT MT/MX and local payment formats &bull; Oversee secure real-time and batch data exchange 4. Compliance, Regulatory &amp; Security Controls: &bull; Ensure alignment with Central Bank and regulatory requirements &bull; International sanctions lists (UN, OFAC, EU, HMT etc.) &bull; Compliance with Bank Information security and cyber security policies. &bull; Lead and support security reviews and penetration testing and remediation activities. 5. Testing &amp; Quality Assurance &bull; Define Test strategy and test data &bull; Define and Govern SIT, UAT, performance, stress and failover testing. &bull; End-to-end payment screening scenario testing &bull; Integration testing with SWIFT and Other Payment channels &bull; Support Security and vulnerability testing &bull; Ensure screening accuracy, alert quality and response-time SLAs. 6. Project Documentation and Knowledge transfer: &bull; Own and maintain all mandatory project documentations including: o HLD, LLD o Interface and API specifications o Message Mapping and Transformation documents o Security and Architecture documents o DR &amp; BCP design o Test strategy and go live plan Official This Document is classified as Official o Lead structured handover to support teams. 7. Stakeholder &amp; Vendor Management: &bull; Act as primary technical interface between IT, compliance, operations and business teams. &bull; Act as the technical coordinator with vendor and external system integrators. &bull; Manage technical risks, dependencies and escalations. Qualifications &amp; Experience: &bull; Bachelor&rsquo;s degree in Computer Science, Information Technology, or related fields. &bull; 10+ years of overall IT experience. &bull; 5+ years in Technical Lead/ Project Technical Lead role &bull; Proven experience implementing sanction screening / AML systems &bull; Strong experience in legacy system replacement and migration projects Payments &amp; Sanction Screening Domain Knowledge: &bull; Solid understanding of Name and Transaction Screening &bull; Understanding of Sanctions, PEP and other Black Lists used for transaction screening &bull; Experience in optimization and fine tuning of Sanction Screening solutions for the efficiency and performance. &bull; Experience in integrating sanction screening solution with payment systems and customer/business channels &bull; Working knowledge of Domestic Payments (ACH, RTGS) and Instant Payments/Speed Transfers &bull; Experience in Cross-border Payments - SWIFT ISO 20022 MX Messages related to CBPR+ and MT messages related to categories such as payments, trade, treasury etc. &bull; In-depth knowledge and field level understanding of SWIFT MT and MX message formats. &bull; Experience in implementing application security and vulnerability fixes. Technical Skills: &bull; High level programming knowledge (java/.net, SQL/PL-SQL, Json, Shell scripting /java scripting). &bull; Knowledge of Middleware / ESB platform &bull; Sanction Screening Systems &bull; API, Micro Services, &bull; REST &amp; SOAP APIs &bull; Messages Queues (IBM MQ, Kafka) &bull; Database: Oracle, MS SQL &bull; Linux environments &bull; Security: Encryption, Certificates, RBAC, Key Management Soft Skills &amp; Leadership: &bull; Strong technical leadership and ownership &bull; Excellent communication with business, compliance and regulators. &bull; Ability to translate regulatory requirements into technical solutions. &bull; Strong problem solving and analytical thinking &bull; Ability to work under tight regulatory deadlines &bull; Effective vendor and stakeholder management. &bull; Strong documentation, reporting and presentation skills.Job Type: Full-timePay: RO700.000 - RO1,500.000 per month

Project Technical Lead – Sanction Screening System Implementation

Role OverviewThe Senior IT Security Engineer will be responsible for installing, administering, monitoring, and maintaining the bank&rsquo;s IT security systems within Test &amp; Development environments. The role includes supporting IT security projects, ensuring system availability, coordinating with internal/external teams, and contributing to the implementation of new security solutions.Key Responsibilities<ul><li>Administer, monitor, and support the bank&rsquo;s IT security systems and tools.</li><li>Install, configure, upgrade, and patch security devices and applications.</li><li>Conduct regular system health checks, performance reviews, and capacity monitoring.</li><li>Assist in evaluating, testing, and rolling out new security products and enhancements.</li><li>Maintain documentation, change records, and operational procedures.</li><li>Lead and participate in IT security projects and initiatives.</li><li>Manage AMC renewals and vendor coordination for security systems.</li><li>Support disaster recovery testing, failover/failback activities.</li><li>Coordinate with auditors (internal/external/regulatory) and provide required evidence.</li><li>Generate MIS reports and monitor internet usage activities.</li><li>Ensure 24&times;7 availability and smooth functioning of all security systems.</li><li>Support internal IT teams, users, and stakeholders with security issues.</li></ul>Security Technologies &amp; Tools Exposure(Experience with any of the following is desirable)<ul><li>Firewalls &amp; VPN</li><li>Web Application Firewall</li><li>Intrusion Detection &amp; Prevention Systems</li><li>Web / Content Filtering solutions</li><li>DDoS mitigation platforms</li><li>Network &amp; Firewall compliance tools</li><li>Endpoint security: AV, EDR, DLP, encryption</li><li>MFA &amp; identity security</li><li>Database Activity Monitoring</li><li>Data classification &amp; scanning tools</li><li>Network monitoring platforms</li></ul>Required Qualifications &amp; Experience<ul><li>Bachelor&rsquo;s Degree in Computer Science, Information Technology, or related field.</li><li>4&ndash;6 years' professional experience in IT Security engineering or operations.</li><li>Hands-on administration experience with firewalls, proxy, IPS/IDS, and endpoint security tools.</li><li>Strong knowledge of networking (TCP/IP, LAN/WAN, routing, switching).</li><li>Experience with Linux/Unix/Windows environments.</li><li>OS/Database hardening knowledge.</li></ul>Preferred Skills / Certifications<ul><li>Master&rsquo;s in Cyber Security (advantage)</li><li>Industry certifications: CISSP, CISM, CISA, CEH, GIAC, CRISC</li><li>Product certifications: CCNP, PCNSE, Juniper, RSA, Proxy security</li><li>Familiarity with standards: ISO 27001, ISO 27005, PCI-DSS, COBIT</li></ul>Soft Skills<ul><li>Strong written and verbal communication skills</li><li>Ability to manage multiple tasks and deadlines</li><li>Analytical problem-solving skills</li><li>Teamwork and collaboration</li></ul>Job Type: Full-timePay: RO800.000 - RO1,500.000 per month

Senior Engineer- IT Security Projects

We are seeking an experienced Red Hat OpenShift ContainerPlatform Administrator (OCPAdministrator) to manage, operate, secure, and optimize our OpenShift Container Platformrunning on bare-metal infrastructure. The resource will be responsible for Day-0, Day-1, andDay-2 operations, including installation, upgrades, patching, cluster reliability, observability,troubleshooting, and automation.2. This role requires strong expertise in Linux, Kubernetes, container orchestration, networking,storage, observability, security hardening, and capability to work with mission-criticalenvironments3. Responsible for handling the calls/ queries and provide IT Infrastructure technical support tovarious projectsPrincipal AccountabilitiesSrNoScope Of Work11. Experience Required:5&ndash;10 years (Minimum 3 years in RedHat OpenShift)2. Key Responsibilities2.1 Platform Administration (Day-to-Day Operations)<ul><li>Manage and administer Red Hat OpenShift v4.x on Bare-Metal</li><li>Monitor cluster health, nodes, pods, resources, ETCD, operators</li><li>Perform ongoing OCP maintenance, tuning, and capacity optimization</li><li>Perform node reprovisioning, scaling, autoscaling, drain/cordon operations</li><li>Manage Infra nodes, Master nodes, Worker nodes, storage, and networking</li></ul>components<ul><li>Support and onboard new applications onto the OpenShift environment</li></ul>2.2 Upgrades, Patching &amp; Lifecycle Management<ul><li>Execute end-to-end OpenShift upgrades (minor and major versions)</li><li>Apply OS patching for RHCOS nodes</li><li>Upgrade operators, registry, ingress, storage operators</li></ul>OfficialThis Document is classified as Official<ul><li>Manage cluster certificates, API/Ingress cert renewal</li><li>Validate upgrade plans in test clusters before production rollout</li></ul>2.3 Networking (OCP &amp; Bare-Metal)<ul><li>Manage cluster networking: OVN-K / Multus / SR-IOV</li><li>Troubleshoot Ingress, LoadBalancer, Routes, DNS, VIP issues</li><li>Work with VLANs, MTU, BGP, HAProxy/MetalLB setups</li><li>Support internal and external routing and firewalls</li></ul>2.4 Storage Management<ul><li>Manage and troubleshoot ODF / Ceph storage issues</li><li>Validate PVC/PV provisioning, StorageClasses, quotas</li><li>Handle persistent storage issues for stateful workloads</li></ul>2.5 Security, Compliance &amp; Governance<ul><li>Implement Pod Security Standards, NetworkPolicies, and Zero-Trust rules</li><li>Enforce CIS and Red Hat security baselines</li><li>Integrate image scanning tools (ACS, Trivy, Clair)</li><li>Manage secrets, vaults, RBAC, SSO/IAM integration</li><li>Ensure audit logs, compliance reports, and policy enforcement</li></ul>2.6 Monitoring, Logging &amp; Observability<ul><li>Configure and manage Prometheus, Alertmanager, Grafana dashboards</li><li>Maintain logging stack (EFK/ELK/Loki)</li><li>Create alerts, refine dashboards, analyze performance trends</li><li>Conduct periodic capacity planning</li></ul>2.7 Backup, Restore &amp; Disaster Recovery<ul><li>Manage ETCD backups, snapshot integrity, restore testing</li><li>Implement OADP/Velero-based application backup</li><li>Participate in DR planning, execution, and drills</li></ul>2.8 CI/CD &amp; DevOps Integration<ul><li>Support Tekton pipelines</li><li>Integrate GitOps platforms (ArgoCD, Flux)</li><li>Manage image registries (Quay / internal registry)</li><li>Tagging, automation, pipeline security</li></ul>2.9 Documentation &amp; Governance<ul><li>Create and maintain SOPs, runbooks, architecture diagrams</li><li>Maintain change records as per ITIL processes</li><li>Prepare RCA for major incidents</li><li>Participate in weekly status reporting and governance meetings</li></ul>OfficialThis Document is classified as Official3. Required Skills &amp; CompetenciesTechnical Skills (Mandatory)<ul><li>Expertise in Red Hat OpenShift 4.x, ODF/Ceph</li><li>Strong Linux (RHEL) administration</li><li>Kubernetes &amp; container fundamentals</li><li>Bare-metal provisioning &amp; OS deployment knowledge</li><li>Networking: DNS, Load Balancers, HAProxy, Firewalls, TCP/IP</li><li>YAML, Helm, Kustomize</li><li>GitOps (ArgoCD/Tekton)</li><li>Prometheus, Grafana, Alertmanager</li><li>CI/CD fundamentals</li><li>Registry management (Quay or equivalent)</li></ul>Preferred Skills<ul><li>Red Hat Advanced Cluster Security (ACS)</li><li>Experience with Multus/SR-IOV</li><li>Ansible automation</li><li>Knowledge of cloud platforms (AWS/Azure/GCP)</li><li>Strong troubleshooting skills across layers (App, Pod, Node, Infra)</li></ul>4. Certifications Required (or strongly preferred)<ul><li>Red Hat Certified Specialist in OpenShift Administration (EX280) &ndash; Mandatory</li><li>RHCE / RHCA &ndash; Preferred</li><li>Kubernetes CKA/CKAD &ndash; Advantage</li><li>Red Hat OpenShift Specialist certifications (ODF, ACS)</li></ul>5. Experience Requirements<ul><li>5&ndash;10 years in Linux/Infrastructure/Container platforms</li><li>Minimum 3 years hands-on experience with OpenShift 4.x</li><li>Must have managed at least one large-scale production OCP cluster</li><li>Prefer candidates with experience in bare-metal or on-prem installations</li></ul>6. Soft Skills &amp; Behavioral Competencies<ul><li>Ability to work under pressure in mission-critical environments</li><li>Strong documentation and communication skills</li><li>Problem-solving and analytical skills</li><li>Ability to collaborate with DevOps, Networking, Security, and Application teams</li><li>Self-driven and proactive</li><li>ITIL process awareness (Incidents, Changes, Problem Management)</li></ul>7. Roles &amp; Responsibilities SummaryArea ResponsibilityOfficialThis Document is classified as OfficialCluster Administration Daily checks, node management, operator healthUpgrades OpenShift, RHCOS, operators, registry, security patchesSecurity RBAC, NetworkPolicies, scanners, CIS hardeningNetworking Routes, Ingress, DNS, VIPs, LB, MultusStorage ODF/Ceph management, PVC/PV troubleshootingMonitoring Dashboards, alerts, capacity analysisDR Backup/restore, Velero, ETCD snapshotsAutomation Ansible, GitOps, YAML templatingDocumentation Runbooks, RCA, architecture diagramsSupport Incident management, L2/L3 escalation8. Education Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science / IT / Engineering</li><li>Equivalent experience with strong technical exposure will also be considered</li></ul>9. Work Pattern &amp; Availability<ul><li>9 x 5</li><li>Must support during weekends if required</li></ul>10. Additional Information<ul><li>Candidates will undergo technical screening, practical scenario evaluation, and</li></ul>hands-on assessment related to OpenShift troubleshooting, YAML creation, and clusteroperations.<ul><li>Prior work in regulated environments (banking, telecom, government, etc.) is a plus.</li></ul>Job Type: Full-timePay: RO800.000 - RO1,300.000 per month

Red Hat OpenShift Container Platform System Administrator

Join Kingdom World Trading SPC and explore 4   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Kingdom World Trading SPC

ABOUT_COMPANY

Security Engineer

Project Technical Lead – Sanction Screening System Implementation

Senior Engineer- IT Security Projects

Red Hat OpenShift Container Platform System Administrator