Cloud Security Professional

Job OpportunityWe are seeking a seasoned Cloud Security Professional to spearhead the security of our containerized workloads.About the Role:This is an exciting opportunity for an experienced Cloud Security Engineer to design, implement, and maintain secure Kubernetes environments across hybrid and multi-cloud platforms.The ideal candidate will possess in-depth knowledge of Kubernetes security principles, including Role-Based Access Control (RBAC), Admission Controllers, and Pod Security Standards. They will also have hands-on experience with container image scanning, vulnerability remediation, and runtime protection.This role requires collaboration with cross-functional teams to identify and address security gaps, develop automation scripts, and implement compliance frameworks such as CIS, NIST 800-190, or Azure Security Benchmark.The selected individual will be responsible for managing AKS identity and access using Azure AD and Managed Identities, configuring RBAC, Network Policies, and Secrets encryption within AKS, and integrating Azure Defender for Containers for real-time threat detection.This is a challenging position that demands strong analytical and troubleshooting skills, excellent communication, and the ability to work collaboratively with security and cloud engineering teams to drive business outcomes.Key Responsibilities:Design and deploy secure AKS clusters following Azure Well-Architected and CIS Kubernetes Benchmarks.Implement container security policies using Azure Policy for Kubernetes, OPA Gatekeeper, or Kyverno.Integrate Azure Defender for Containers to monitor vulnerabilities and runtime threats.Manage AKS identity and access using Azure AD and Managed Identities to enforce least-privilege access.Configure RBAC, NetworkPolicies, Pod Security Standards, and Secrets encryption within AKS.Enable image scanning via Microsoft Defender, Trivy, or Aqua integrated with CI/CD pipelines (Azure DevOps / GitHub Actions).Enforce image provenance and registry security using Azure Container Registry (ACR).Develop automation scripts using Python / PowerShell / Bash for compliance, monitoring, and policy enforcement.Configure Azure Monitor, Log Analytics, and Application Insights for proactive threat detection.Support incident response and forensics for AKS and containerized workloads.Conduct periodic security assessments, posture reviews, and cluster audits in collaboration with central security teams.Maintain documentation and playbooks for AKS hardening, patching, and compliance processes.Required Qualifications: 5+ years of experience in Cloud Security, DevSecOps, or Container Platform Engineering.3+ years of hands-on experience managing and securing AKS (Azure Kubernetes Service).Strong knowledge of Kubernetes security fundamentals — RBAC, Admission Controllers, Pod Security, SCC equivalents.Expertise in container image scanning, vulnerability remediation, and runtime protection.Experience with CI/CD security (Azure DevOps, GitHub Actions, Jenkins).Proficiency in scripting (Python, Bash, or PowerShell).Familiarity with Azure networking and identity services — VNETs, Private Endpoints, Azure AD, KMS.Preferred Qualifications: Certified Kubernetes Administrator (CKA) or CKS (Certified Kubernetes Security Specialist).Microsoft Certified: Azure Kubernetes Service Specialist / Azure Security Engineer Associate.Experience with OPA Gatekeeper, Kyverno, or Pod Security Admission.Knowledge of Defender for Cloud / Defender for Containers integration.Experience with infrastructure as code (Terraform, Bicep, or ARM templates).Exposure to CIS, NIST 800-190, or Azure Security Benchmark compliance frameworks.Soft Skills: Excellent troubleshooting and analytical skills.Strong cross-functional communication and collaboration with security and cloud engineering teams.Proactive in identifying vulnerabilities and suggesting preventive controls.