The SME role specializing in Cloud Security will play a pivotal role in designing implementing and managing cloud security solutions across AWS and Azure platforms. This position requires a deep understanding of cloud security principles architecture best practices and a broad experience in implementing security controls and frameworks in cloud environments. The ideal candidate should have 814 years of experience working with cloud platforms delivering security strategies and managing risks for enterpriselevel deployments.
Key Responsibilities:
- Cloud Security Architecture & Design:
- Design and implement security architecture for cloud infrastructure (AWS and Azure) ensuring robust protection for data applications and services.
- Develop and maintain security standards guidelines and reference architectures for cloud solutions.
- Collaborate with cloud engineering teams to define and implement secure infrastructure designs including VPC configurations network security and IAM policies.
- Create highlevel architecture diagrams and technical documentation for cloud security solutions.
- Security Implementation & Integration:
- Deploy security solutions such as Web Application Firewalls (WAF) Cloud Security Posture Management (CSPM) Key Management Services (KMS) and Identity and Access Management (IAM).
- Implement and manage native security services on AWS (GuardDuty Security Hub Inspector) and Azure (Sentinel Microsoft Defender for Cloud Key Vault) to enhance visibility and threat detection.
- Configure and maintain encryption mechanisms for data at rest and in transit using cloudnative tools (KMS AWS Secrets Manager Azure Key Vault).
- Lead the implementation of Identity and Access Management (IAM) policies rolebased access controls (RBAC) and least privilege access principles.
- Security Compliance & Risk Management:
- Ensure compliance with industry standards and regulations (e.g. ISO 27001 GDPR HIPAA SOC 2) as per the requirement.
- Perform security assessments and audits for cloud environments identifying risks vulnerabilities and compliance gaps.
- Develop and enforce cloud security policies ensuring adherence to security best practices and frameworks (NIST CIS benchmarks).
- Collaborate with compliance teams to align cloud security strategies with regulatory requirements and internal controls.
- Cloud Security Monitoring & Incident Response:
- Implement and maintain cloud security monitoring and logging solutions using services such as AWS CloudTrail AWS Config Azure Monitor and Azure Security Center.
- Establish and maintain Security Information and Event Management (SIEM) solutions for proactive threat detection and incident response.
- Develop playbooks and automated scripts to respond to security incidents in cloud environments.
- Act as an escalation point for cloud security incidents performing root cause analysis and driving remediation efforts.
- Cloud Infrastructure Management & Optimization:
- Optimize cloud infrastructure for security performance and cost leveraging services such as AWS Trusted Advisor and Azure Cost Management.
- Implement network security controls including security groups network security policies VPNs and application gateways.
- Perform regular reviews and hardening of cloud infrastructure ensuring security configurations are uptodate and aligned with best practices.
- Collaboration & Stakeholder Management:
- Work closely with DevOps engineering and operations teams to integrate security into CI/CD pipelines and cloud deployments.
- Provide technical guidance and mentorship to junior engineers and cloud security teams.
- Collaborate with internal and external stakeholders to communicate security requirements project status and compliance metrics.
- Continuous Improvement & Innovation:
- Stay up to date with the latest cloud security trends tools and technologies.
- Participate in industry forums conferences and training sessions to maintain expertise in cloud security.
- Evaluate and implement new cloud security tools and services to improve the security posture of the organization.
Skills & Competencies:
- Strong knowledge of AWS and Azure security services IAM network security and data protection.
- Expertise in cloud security architecture threat modeling and risk management.
- Proficiency in scripting and automation (Python Terraform CloudFormation) for security automation.
- Excellent analytical and problemsolving skills with the ability to handle complex cloud security challenges.
- Strong communication and presentation skills to convey complex technical concepts to a variety of stakeholders.
Experience:
- 814 years of experience in cloud security architecture implementation and management.
- Proven experience in managing largescale cloud deployments and securing multicloud environments.
Qualifications :
Qualifications:
- Bachelors degree in computer science Information Technology or a related field.
- Relevant certifications such as AWS Certified Solutions Architect AWS Certified Security Specialty Microsoft Certified: Azure Security Engineer or similar.
- Proficiency in security frameworks and standards like NIST CIS and ISO 27001.
- Handson experience in implementing and managing security controls in multicloud environments (AWS and Azure).
Remote Work :
Yes
Employment Type :
Fulltime