Cloud Security Engineer

Please do not apply if JD does not align with your skill set.

Role Summary:

We are looking for a highly skilled Cloud Security Engineer / Security Architect with strong hands-on experience in designing and implementing secure cloud infrastructure, primarily on Azure (with multi-cloud exposure desirable). This role combines in-depth cloud security architecture with practical DevOps automation and infrastructure-as-code expertise to build secure, scalable, and compliant cloud environments.

Key Responsibilities:

• Design, implement, and maintain cloud security architectures that meet organizational compliance and governance standards, primarily within Azure environments.
• Perform thorough security assessments, vulnerability analysis, and threat modeling for cloud workloads and services.
• Lead the development and enforcement of security policies, controls, and configurations using Azure Policy, Security Center, and Azure Sentinel.
• Collaborate with DevOps teams to embed security controls within CI/CD pipelines using Azure DevOps, ARM templates, Terraform, and related Infrastructure as Code (IaC) tools.
• Automate security workflows including infrastructure provisioning, compliance remediation, and incident response using PowerShell, Azure CLI, and scripting.
• Manage identity and access management (IAM) controls with Azure Active Directory, including RBAC, Conditional Access, and Privileged Identity Management.
• Harden cloud infrastructure components such as AKS clusters, virtual networks, key vaults, load balancers, private endpoints, and storage accounts.
• Monitor security events and alerts, tune security information and event management (SIEM) solutions, and lead investigations of potential security incidents.
• Develop security reference architectures, blueprints, and documentation to guide secure cloud deployments.
• Support cloud migration projects by assessing security risks, defining security requirements, and validating secure configurations.
• Provide guidance and training to development and operations teams on secure coding practices, security tools, and emerging cloud security trends.
• Stay current with the latest security threats, vulnerabilities, and regulatory requirements impacting cloud infrastructure.

Required Skills and Experience

• Bachelors degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience).
• 5+ years of experience in cloud security engineering or security architecture, particularly in Azure environments.
• Deep understanding of cloud security principles, risk management frameworks (e.g., NIST, CIS, CSA), and compliance standards (e.g., GDPR, HIPAA).
• Expertise with Infrastructure as Code (IaC) tools such as Terraform, ARM templates, or Bicep for secure infrastructure provisioning.
• Practical experience with cloud-native DevOps tools and CI/CD pipelines, specifically Azure DevOps or GitHub Actions.
• Proficient scripting skills in PowerShell, Azure CLI, or Python for automation and orchestration.
• Strong knowledge of Azure security services, including Azure Active Directory, Key Vault, Sentinel, Security Center, Azure Policy, and Azure Firewall.
• Experience securing Kubernetes environments (AKS preferred), including network policies, authentication, and secrets management.
• Familiarity with SIEM tools and security event monitoring, preferably Azure Sentinel or similar.
• Solid networking knowledge including virtual networks, subnets, NSGs, VPNs, ExpressRoute, and private endpoints.
• Experience with identity and access management (IAM), RBAC design, Conditional Access policies, and MFA implementation.
• Ability to interpret and implement organizational security governance and compliance requirements.