Senior Domain Manager Cloud

Job Purpose
To design, implement, operate, and govern enterprise-grade encryption key management, secrets management, and vault platforms across multi-cloud environments including Azure, AWS, GCP, Oracle Cloud, and IBM Cloud. The role involves supporting day-to-day cloud operations, resolving escalated issues, assisting in large-scale cloud migrations, and ensuring performance, security, and reliability of mission-critical workloads hosted on Azure.
Duties and Responsibilities
A-Minimum required Accountabilities for this role

B-Additional Accountabilities pertaining to the role
Major Challenges

• Managing consistent encryption and secrets strategy across five different cloud providers
  
• Ensuring high availability and lowlatency access to vault services for missioncritical workloads
  
• Handling key rotation and zerodowntime secrets updates for production systems
  
• Meeting strict regulatory and audit requirements in financial services
  
• Securing secrets across diverse runtimes: VMs, containers, Kubernetes, serverless, and legacy systems
  
• Coordinating with multiple teams under tight delivery and security SLAs

Required Qualifications and Experience
a)Qualifications

• Bachelors degree in Computer Science, Information Technology, Cybersecurity, or related field
  
• 710 years of overall IT experience with 5+ years in Cloud Security / Key Management
  b)Work Experience
  Key Management Cryptography
  
  Strong handson experience with:
  
  
• Azure Key Vault Managed HSM
  
• AWS KMS CloudHSM
  
• GCP Cloud KMS
  
• OCI Vault
  
• IBM Key Protect
  
  
  
• Understanding of encryption algorithms, TLS, certificates, PKI, asymmetric/symmetric cryptography
  
• CMK, BYOK, HYOK, envelope encryption patterns
  
• Secrets Vault Management
  
• Secrets lifecycle management for:
  
  Database credentials
  
• API keys, tokens, certificates
  
• Application and platform secrets
  
• HashiCorp Vault architecture, HA setup, and integrations (preferred)
  
  Cloud Platform Integration
  
  
• Kubernetes secrets integration (AKS, EKS, GKE, OKE)
  
• Secure CI/CD integrations (Azure DevOps, Jenkins, GitHub Actions)
  
• IAM, RBAC, workload identity, and leastprivilege access
  
  Automation DevSecOps
  
  
• Infrastructure as Code using Terraform
  
• Automation using Python, PowerShell, Bash
  
• Policy as Code and security guardrails
  
  Monitoring, Audit Compliance
  
  
• Key usage logging, audit trails, alerting
  
• Compliance mapping for PCIDSS, ISO, SOC2, RBI guidelines
  
• Incident management and root cause analysis (RCA)