Platform Security Engineer SRE

Job Title: Platform Security Engineer / SRE
Location: Hyderabad, Chennai, Bangalore
Experience: 8+ Years

Job Type: Permanent

Notice Period: Immediate

Role Overview

Provide platform runtime security engineering capability across the Core Banking Vault ecosystem, ensuring cloud, Kubernetes, service networking, and workload controls are secure, supportable, and operationally embedded.

Key Responsibilities

• Design, build, automate, and operate security controls across GCP, GKE, Kubernetes, service mesh, identity, access, secrets, certificates, networking, runtime protection, and platform hardening.
• Work with engineering, SRE, cyber, risk, compliance, architecture, and supplier teams to embed secure-by-default patterns into the platform and reduce production security risk.
• Support secure build-and-run ownership by improving security monitoring, vulnerability remediation, secrets management, access control, certificate lifecycle management, and evidence capture.
• Drive continuous improvement by simplifying security controls, automating repeatable tasks, strengthening governance, and ensuring controls are practical for engineering teams to adopt.

Required Skills & Experience

• Strong experience as a Platform Security Engineer, Cloud Security Engineer, Site Reliability Engineer, Platform Engineer, or DevSecOps Engineer in cloud-native environments.
• Hands-on experience securing cloud-native platforms, preferably GCP and GKE, including identity, IAM, networking, Kubernetes security, workload identity, and platform hardening.
• Experience with secrets management, certificate management, encryption, access controls, service-to-service security, mTLS, and runtime security patterns.
• Good working knowledge of Kubernetes, Istio or service mesh technologies, ingress/egress controls, network policies, and secure workload deployment patterns.
• Experience integrating security controls into operational processes, including monitoring, alerting, vulnerability remediation, incident response, evidence capture, and continual improvement.
• Strong understanding of CI/CD security, policy-as-code, container security, dependency risk, artefact controls, and secure software supply chain principles.
• Experience with Infrastructure as Code, preferably Terraform, and automation to standardise security controls and reduce manual intervention.
• Ability to work across engineering, SRE, cyber/security, risk, architecture, supplier, and operations teams to deliver pragmatic platform controls.

Good to Have

• Banking or core banking platform experience.
• Experience working with Thought Machine Vault.
• Experience supporting large-scale distributed systems and business-critical regulated platforms.
• Experience with GCP Security Command Centre, IAM, KMS, Secret Manager, Vault, Kubernetes admission controls, OPA, container scanning, or runtime security tooling.
• Experience with Dynatrace, OpenTelemetry, GKE, Istio, Apigee, Kafka, Terraform, or CI/CD tooling.
• Understanding of operational resilience, audit, risk, evidence capture, and compliance expectations within a regulated environment.