cloud security engineer support - Pega

Experience: 10+ Years

Visa: USC/EAD

At a high level, this is for cloud security engineer support as the client migrates the Pega platform from the current on-prem/private-cloud setup to dedicated Pega Cloud on AWS, primarily using a lift-and-shift approach where feasible.

The resource will serve as the security SME and should independently coordinate with the Pega Cloud, client’s Security team, Network, and delivery teams to drive the following activities:

Establish secure connectivity and tunneling between Pega Cloud and client’s environments, including security gateways, routing, firewall rules, ports, allowlisting, and DNS.

Review and align the target cloud security architecture, including network segmentation, ingress/egress controls, certificates, encryption, and access controls.

Establish and validate connectivity for in-scope integrations, including the one-time data migration, APIGEE, Kafka, SFTP, and other required interfaces.

Coordinate security reviews, evidence collection, remediation, and approvals for Permit to Build (PTB) and Permit to Operate (PTO).

Ensure non-production connectivity through UAT is certified under PTB, with PTO completed for Pre-Prod/Production Mirror and Production.

Track environment-specific connectivity requirements and target dates through testing and production cutover.

Provide security validation and support through go-live, ensuring all required client’s security controls and approvals are in place.

The resource is not expected to own the overall Pega migration but must independently drive the security and connectivity workstream to closure in partnership with the respective teams.