Senior Cloud Security Professional

Job DescriptionWe are seeking a senior-level Cloud Security Engineer to join our organization.This role will be responsible for designing, implementing, and managing the end-to-end security posture across AWS and Azure cloud environments, endpoints, data, communications, and systems.The successful candidate will ensure Zero Trust principles are applied across all layers of identity, access, data, and infrastructure, and will lead SecOps and SOC operations to protect against cyber threats, ensure compliance, and maintain operational resilience.Key Responsibilities:Design and implement secure cloud architectures that align with organizational standards and regulatory requirements.Manage and harden cloud environments using AWS services (EC2, S3, RDS, IAM, VPC, CloudFormation, Route 53, CloudWatch) and Azure services (VMs, Storage, Networking, Azure AD, Synapse).Apply Zero Trust principles across all cloud layers, enforcing segmentation, least privilege, and secure access policies.Conduct regular cloud security posture reviews and audits, ensuring adherence to frameworks such as ISO 27001, NIST, CIS, and SCA.Microsoft & Identity Security ManagementThe selected candidate will be responsible for administering and securing Microsoft 365, Exchange, Active Directory, and Windows Server OS environments.This includes ensuring effective management of domain services, identity synchronization, and group policies, as well as implementing Conditional Access, MFA, and Privileged Access Management (PAM) controls to protect user and administrative identities.Infrastructure Operations & BAU SecurityThis role involves overseeing infrastructure BAU operations including backups, patching, monitoring, and capacity management.The successful candidate will also lead SecOps activities including endpoint patching, vulnerability remediation, and system hardening, and manage both Windows and Linux operating systems, ensuring compliance with hardening benchmarks.Automation, DevSecOps & Infrastructure as Code (IaC)The selected candidate will be responsible for implementing and managing CI/CD pipelines using Azure DevOps (preferred), AWS CodePipeline, and GitHub Actions.This includes applying Infrastructure as Code (IaC) principles using Terraform, CloudFormation, ARM, Bicep, and Ansible to automate provisioning and enforce secure configurations.Security Operations (SOC) & Incident ManagementThis role involves overseeing SOC operations, ensuring effective monitoring, alert triage, and incident response.The successful candidate will utilize SIEM/SOAR tools (Azure Sentinel, Splunk, AWS Security Hub) for centralized visibility and automation, and lead the incident response lifecycle—detection, containment, investigation, remediation, and lessons learned.Risk Management, Compliance & ResilienceThe selected candidate will be responsible for conducting vulnerability assessments, penetration testing, and compliance reviews across systems and networks.This includes defining risk treatment plans and ensuring timely mitigation of identified risks, maintaining documentation for all cloud security controls, policies, and configurations, and implementing and validating Disaster Recovery (DR) and Business Continuity strategies across AWS and Azure.Requirements & QualificationsBachelor's degree in Computer Science, Information Security, or related field (Master's preferred).10+ years of IT and security experience, with at least 5 years in multi-cloud (AWS and Azure) security.Proven track record designing and managing cloud and hybrid security architectures.Experience implementing Zero Trust frameworks and securing cloud infrastructure and endpoints.Hands-on expertise with IAM, EDR, DLP, encryption, and vulnerability management tools.Experience managing SOC/SecOps and supporting compliance with ISO 27001, NIST, and SCA standards.Certifications:CISSP or CCSP (required).AWS Certified Security – Specialty (preferred).Microsoft Certified: Cybersecurity Architect Expert or Azure Security Engineer Associate (preferred).ISO 27001 Lead Implementer or Zero Trust Certified Architect (advantage).ITIL Foundation (preferred).Skills & Competencies:Cloud security architecture (AWS & Azure).Identity and access management (IAM, PAM, MFA, Conditional Access).Infrastructure as Code (Terraform, CloudFormation, ARM, Bicep, Ansible).SOC and SecOps operations management.Endpoint and vulnerability management (EDR, patching, DLP).DevSecOps and CI/CD integration (Azure DevOps preferred).Networking, firewalls, VPN, and hybrid connectivity security.Compliance with ISO 27001, NIST, and SCA frameworks.Disaster Recovery and business resilience planning.Strong analytical and problem-solving mindset.Effective communication with technical and non-technical stakeholders.High attention to detail and accountability.Collaborative and team-oriented approach.Continuous learning and adaptability to evolving threats and technologies.