Infosec, Compliance Specialist

🕒 5 days ago

🇱🇧 Lebanon – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CME

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2005

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

CME is a multinational technology consulting firm that specializes in driving digital transformation for businesses worldwide. With expertise in areas such as staff augmentation, software development, artificial intelligence, and the Internet of Things, CME delivers tailored, end-to-end technology solutions that enable clients to improve operational excellence and customer engagement. Their impressive track record includes partnerships with Fortune 500 companies and successful execution of over 250 innovative projects, making them a trusted partner in the technology consulting space.

📋 Description

• Architect enterprise Single Sign-On (SSO) solutions using Keycloak, SAML 2.0, and OpenID Connect (OIDC) • Configure Microsoft Entra ID (Azure AD) and Google Cloud Identity as identity brokers • Establish centralized Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Zero Trust security policies across all platform boundaries • Manage GitHub Advanced Security (GHAS) initiatives, including enforcement of Dependabot alerts, secret scanning, static code analysis (CodeQL/SAST), and branch protection rules • Implement portable secrets management and monitor service-to-service security mechanisms such as mutual TLS (mTLS) across Kubernetes cluster boundaries • Lead audit readiness activities, vulnerability scanning programs, and compliance enforcement initiatives for frameworks such as SOC 2 and ISO 27001 • Collaborate with engineering, platform, and operations teams to ensure security controls are embedded throughout the software development lifecycle • Support continuous improvement of organizational security posture through governance, risk management, and compliance best practices

🎯 Requirements

• Bachelor’s degree in Computer Science, Software Engineering, or a related field • Minimum 5 years of experience in Information Security, Identity and Access Management (IAM), Compliance, DevSecOps, or a related field • Deep experience with Keycloak administration, realm configuration, user federation, and Identity Provider (IdP) mapping • Strong knowledge of Microsoft Entra ID enterprise applications and Google Identity Platform • Experience enforcing security policies across multi-tenant Kubernetes clusters and cloud boundaries • Familiarity with GitHub Advanced Security and DevSecOps automated tooling • Strong understanding of SAML 2.0, OpenID Connect (OIDC), identity federation, and authentication protocols • Experience implementing RBAC, MFA, Zero Trust architectures, and cloud security best practices • Knowledge of vulnerability management, audit readiness processes, and compliance frameworks such as SOC 2 and ISO 27001 • Excellent analytical, problem-solving, and risk assessment skills • Excellent English communication skills • Ability to work effectively with cross-functional and globally distributed teams • Availability to work from 11:00 AM to 8:00 PM

🏖️ Benefits

• Remote work arrangement