Senior Domain Manager Cloud

Job Purpose
To design, implement, operate, and govern enterprise-grade encryption key management, secrets management, and vault platforms across multi-cloud environments including Azure, AWS, GCP, Oracle Cloud, and IBM Cloud. The role involves supporting day-to-day cloud operations, resolving escalated issues, assisting in large-scale cloud migrations, and ensuring performance, security, and reliability of mission-critical workloads hosted on Azure.
Duties and Responsibilities
A-Minimum required Accountabilities for this role

B-Additional Accountabilities pertaining to the role
Major Challenges

• Managing consistent encryption and secrets strategy across five different cloud providers
• Ensuring high availability and lowlatency access to vault services for missioncritical workloads
• Handling key rotation and zerodowntime secrets updates for production systems
• Meeting strict regulatory and audit requirements in financial services
• Securing secrets across diverse runtimes: VMs, containers, Kubernetes, serverless, and legacy systems
• Coordinating with multiple teams under tight delivery and security SLAs

Required Qualifications and Experience
a)Qualifications

• Bachelors degree in Computer Science, Information Technology, Cybersecurity, or related field

• 710 years of overall IT experience with 5+ years in Cloud Security / Key Management
  b)Work Experience
  Key Management Cryptography

  Strong handson experience with:

• Azure Key Vault Managed HSM

• AWS KMS CloudHSM

• GCP Cloud KMS

• OCI Vault

• IBM Key Protect

• Understanding of encryption algorithms, TLS, certificates, PKI, asymmetric/symmetric cryptography

• CMK, BYOK, HYOK, envelope encryption patterns

• Secrets Vault Management

• Secrets lifecycle management for:

  Database credentials

• API keys, tokens, certificates

• Application and platform secrets

• HashiCorp Vault architecture, HA setup, and integrations (preferred)

  Cloud Platform Integration

• Kubernetes secrets integration (AKS, EKS, GKE, OKE)

• Secure CI/CD integrations (Azure DevOps, Jenkins, GitHub Actions)

• IAM, RBAC, workload identity, and leastprivilege access

  Automation DevSecOps

• Infrastructure as Code using Terraform

• Automation using Python, PowerShell, Bash

• Policy as Code and security guardrails

  Monitoring, Audit Compliance

• Key usage logging, audit trails, alerting

• Compliance mapping for PCIDSS, ISO, SOC2, RBI guidelines

• Incident management and root cause analysis (RCA)