Cloud Architect

Cyber Security Cloud Architect

Location: Bangalore, India

Experience: 12-15 Years (Total Cybersecurity), 6-8 Years (Cloud Security)

Employment Type: Full-time

Job Overview :

We are seeking a highly experienced and strategic Cyber Security Cloud Architect to lead and evolve our cloud security posture. With 12-15 years in cybersecurity and a specialized focus of 6-8 years in cloud security, you will be instrumental in designing, implementing, and managing robust security architectures within our cloud environments, particularly within the banking or financial services industry. You will drive security governance, ensure compliance, and embed DevSecOps practices to safeguard our digital assets.

Roles and Responsibilities :

- Lead the design, implementation, and continuous improvement of secure cloud architectures across various public cloud platforms.

- Implement and manage comprehensive security governance frameworks and cloud compliance programs, ensuring adherence to industry standards and regulations.

- Provide expert guidance and leadership in DevSecOps practices, integrating security controls and automation into continuous integration/deployment (CI/CD) pipelines.

- Develop and maintain security automation scripts using programming/scripting languages like Python, Terraform, and ARM for security integration and infrastructure as code (IaC) security.

- Lead and influence diverse technical and non-technical teams, fostering a culture of security awareness and accountability.

- Design and implement security solutions for containerized applications and orchestration platforms (e.g., Docker, Kubernetes).

- Oversee the implementation and optimization of cloud security tools such as CNAPP (Cloud-Native Application Protection Platform), SSPM (SaaS Security Posture Management), KSPM (Kubernetes Security Posture Management), and SASE (Secure Access Service Edge).

- Conduct thorough risk assessments for cloud environments, developing and implementing effective risk management and mitigation strategies.

- Collaborate with development and operations teams to embed security best practices throughout the software development lifecycle.

- Present complex security findings, strategies, and the ROI of security investments to senior management and executive stakeholders.

- Stay abreast of the latest cloud security threats, technologies, and industry trends, advising on proactive security measures.

Required Skills :

- Strong understanding of cloud security tools including CNAPP, SSPM, KSPM, and SASE.

- Hands-on experience with infrastructure-as-code (IaC) tools (e.g., Terraform, CloudFormation) and expertise in securing IaC templates.

- In-depth knowledge of industry security standards and regulations such as PCI-DSS, ISO 27001, NIST, CSA (Cloud Security Alliance), GDPR, and HIPAA.

- Strong understanding of risk management and mitigation strategies specifically tailored for cloud environments.

- Proficiency in core Information Security concepts (e.g., encryption, access control, network segmentation, incident response).

- Strong problem-solving and analytical skills with a focus on cloud-native security challenges.

- Excellent communication skills for interacting with technical teams and presenting findings to senior management.

- Familiarity with security-focused DevOps tools (e.g., Jenkins, GitLab CI, Docker, Kubernetes).

- Ability to align security initiatives with broader business objectives and articulate the financial return on security investments.

Certifications :

- Cloud-specific: AWS Certified Security Specialist, Azure Security Engineer Associate, Google Professional Cloud Security Engineer.

- Governance and Risk: CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control).

- Security: CISSP (Certified Information Systems Security Professional), CCSP (Certified Cloud Security Professional).

- DevOps: Certified Kubernetes Administrator (CKA), DevSecOps Practitioner.