Cloud Security Architect
Summary
Hands-on cloud security engineer/architect who implements security controls across AWS and/or Azure (IAM, networking, encryption), configures cloud-native logging and monitoring (CloudTrail, GuardDuty, Defender for Cloud), integrates alerts with SIEM, hardens containers/Kubernetes and CI/CD, and automates compliance using Terraform/IaC. Work-from-office in Bengaluru.
We are looking for a hands-on Cloud Security Engineer to implement and maintain cloud security controls, improve security posture and integrate cloud monitoring with enterprise security operations. The role requires practical engineering ability and strong understanding of cloud security risks.
Key Responsibilities:
- Implement security controls across AWS and/or Microsoft Azure, including IAM, networking, compute, storage and encryption.
- Configure cloud-native security services and logging, such as AWS CloudTrail, GuardDuty and Security Hub or Microsoft Defender for Cloud and Azure Monitor
- Assess cloud environments for misconfigurations, exposed assets, excessive privileges and vulnerabilities; drive remediation. Integrate cloud audit logs, security alerts and workload telemetry with SIEM and incident response workflows.
- Secure cloud workloads, containers, Kubernetes and CI/CD pipelines through hardening, secrets management and automated checks.
- Use infrastructure as code and scripting to automate configuration checks, compliance controls and routine security tasks. Support investigation of cloud security incidents and maintain technical runbooks and configuration documentation.
Required Skills & Experience:
- 6+ years in IT/security engineering with hands-on experience securing AWS and/or Azure environments.
- Strong understanding of IAM/RBAC, VPC/VNet, security groups/NSGs, WAF, KMS/Key Vault and cloud logging.
- Experience with CSPM/CNAPP, vulnerability management, workload protection and cloud security monitoring.
- Working knowledge of Terraform or similar IaC tools, scripting and DevSecOps practices.
- Familiarity with container/Kubernetes security, incident response and hybrid connectivity is preferred.
Education & Preferred Certifications:
- Bachelors degree in computer science, IT, Engineering or equivalent experience.
- Preferred certifications include AWS Certified Security Specialty, Microsoft AZ-500, CCSP or equivalent cloud security credentials.
- Location: Bangalore (WFO)