Cloud Security Engineer

Job description

Job responsibilities

• Cloud Infrastructure Security: Securely deploy and maintain infrastructure across diverse multi-cloud environments (AWS, Azure, GCP, OCI), establishing cloud-specific robust guardrails to prevent insecure deployments…
• Kubernetes Cluster Hardening: Implement and enforce security best practices and policies specifically tailored for Cloud native Kubernetes clusters, including granular Role-Based Access Control (RBAC), network…
• Identity & Access Management (IAM): Develop, implement, and enforce robust security policies and procedures specifically related to user authentication and authorization across all systems.
• Container Security: Ensure the security of container images, registries, and runtime environments through the effective use of tools like Docker, Podman, and various container scanning solutions.
• Infrastructure-as-Code (IaC) Security: Manage infrastructure and security policies through version-controlled Git repositories using tools such as Terraform, CloudFormation, or AWS CDK to ensure consistent, auditable,…
• Cloud Security Posture Management (CSPM): Maintain CSPM tools such as Wiz to continuously detect and remediate misconfigurations and compliance drifts across the cloud footprint.
• Compliance Automation: Automate compliance checks and generate necessary evidence for audits across the multi-cloud environment, streamlining regulatory adherence.
• Runtime Security: Monitor and protect running applications and containers from threats during their operational lifecycle.

Job requirements

• 5+ years of industry experience in software engineering or security engineering, with a focus on designing and building secure, production-grade cloud systems.
• Extensive, demonstrable experience with Kubernetes from a security perspective (e.g., securing containerized workloads, enforcing RBAC, and cloud-native secret management).
• Implemented AI to rapidly identify, validate, and remediate security issues without impact.
• Deep operational security experience with AWS (mandatory), with highly preferred practical experience deploying and securing infrastructure across Azure, GCP, or OCI.
• Proficiency in Infrastructure-as-Code (IaC) tools such as Terraform, CloudFormation, or AWS CDK to deploy and manage environments.
• Hands-on expertise in configuring, monitoring, and driving remediation through Cloud Security Posture Management (CSPM) platforms like Wiz.
• A strong background in designing and enforcing complex Identity & Access Management (IAM) and least-privilege architectures across both multi-cloud and traditional on-premises directory environments.
• Experience working with container security, image scanning, and runtime protection tools.