Cloud Security Engineer - iAM

Job Description :

We are seeking an experienced Cloud Security Engineer to join our Enterprise Engineering team and play a key role in securing our cloud-native platforms and enterprise infrastructure. This position is responsible for designing, implementing, and maintaining security controls across multi-cloud environments while ensuring that security is embedded throughout the software development lifecycle.

As a Cloud Security Engineer, you will partner with Cloud Engineering, DevOps, Platform Engineering, Infrastructure, Architecture, and Application Development teams to implement security-by-design principles, strengthen cloud governance, and protect enterprise workloads deployed across AWS, Microsoft Azure, and Google Cloud Platform (GCP).

The ideal candidate will have strong expertise in cloud security architecture, DevSecOps, identity and access management, container security, Kubernetes, CI/CD security, infrastructure as code, and security automation.

Key Responsibilities :

• Design, implement, and maintain enterprise cloud security architectures across AWS, Microsoft Azure, and Google Cloud Platform (GCP).

• Develop and enforce cloud security standards, policies, and best practices aligned with enterprise security requirements.

• Integrate security controls into cloud-native application development and DevSecOps pipelines.

• Build and automate security controls across infrastructure, applications, containers, and Kubernetes platforms.

• Collaborate with engineering teams to embed security throughout the Software Development Life Cycle (SDLC).

• Perform cloud security architecture reviews and provide security recommendations for new applications and services.

• Design and implement Identity and Access Management (IAM) strategies, including least privilege access, role-based access control (RBAC), and privileged access management.

• Secure Kubernetes clusters and containerized workloads by implementing runtime protection, image scanning, and policy enforcement.

• Review and secure Infrastructure as Code (IaC) deployments using Terraform, ARM, CloudFormation, or similar technologies.

• Implement cloud-native security services, including encryption, key management, secrets management, logging, and monitoring.

• Configure and manage cloud security tools such as AWS Security Hub, Azure Defender/Microsoft Defender for Cloud, GuardDuty, Azure Sentinel, Security Command Center, and related services.

• Identify cloud security risks through continuous assessments, vulnerability scanning, and configuration reviews.

• Perform threat modeling and security risk assessments for cloud applications and infrastructure.