Senior Cloud Security Specialist

Job Title:

Senior Cloud Security Engineer and Architect

Job Description:

We are seeking a highly experienced Senior Cloud Security Engineer and Architect with 8-10 years of experience in cloud security and architecture. The ideal candidate will have expertise in designing, implementing, and maintaining secure cloud infrastructure on platforms like AWS, Azure, or GCP.

The successful candidate will be responsible for leading the implementation and enforcement of cloud security best practices, including Identity and Access Management (IAM), network security, data encryption, and vulnerability management.

Key Responsibilities:

• Cloud Architecture: Design and implement scalable, secure, and reliable cloud architectures that meet business requirements.
• Cloud Security: Lead the implementation and enforcement of cloud security best practices, including IAM, network security, data encryption, and vulnerability management.
• Automation & Orchestration: Develop and maintain automation scripts and tools (e.g., Python, Bash) and manage infrastructure using orchestration tools like Terraform, CloudFormation, or Ansible.
• CI/CD Pipeline: Design, implement, and optimize robust CI/CD pipelines for rapid, secure, and reliable software delivery.
• Monitoring & Alerting: Set up comprehensive monitoring, logging, and alerting systems to identify and resolve issues proactively, focusing on security events.
• Incident Response: Participate in incident response activities related to infrastructure and security events, performing root cause analysis and implementing preventative measures.
• Compliance: Ensure compliance with industry standards and regulatory requirements (e.g., SOC2, ISO 27001, GDPR) through automated checks and policy enforcement.
• Collaboration: Work closely with development, security, and operations teams to embed security and operational excellence into every stage of the product lifecycle.
• Mentorship: Mentor junior engineers, share knowledge, and promote a culture of continuous learning and growth.

Qualifications & Experience:

• Experience: 8-10 years of progressive experience in cloud security, DevOps, or a similar role.
• Cloud Platforms: Expert-level proficiency with at least one major cloud provider (AWS, Azure, or GCP). AWS preferred.
• Containerization & Orchestration: Strong experience with Docker and Kubernetes.
• CI/CD Tools: Hands-on experience with tools like Jenkins, GitLab CI/CD, GitHub Actions, Azure DevOps, or CircleCI.
• IaC Tools: Proficiency with Terraform, CloudFormation, or Ansible.
• Scripting: Advanced scripting skills in Python, Bash, or PowerShell.
• Operating Systems: Strong Linux administration skills.
• Networking: Deep understanding of networking concepts (TCP/IP, DNS, Load Balancing, VPNs) and network security principles.

Security Specialization:

• Security Best Practices: Demonstrated expertise in cloud security principles, best practices, and common attack vectors.
• Identity and Access Management (IAM): Extensive experience configuring and managing IAM roles, policies, and federated identities in cloud environments.
• Vulnerability Management: Experience with vulnerability scanning tools, penetration testing methodologies, and remediation strategies.
• Security Information and Event Management (SIEM): Experience integrating security logs into SIEM solutions for threat detection and analysis.
• Data Protection: Knowledge of data encryption techniques (at rest and in transit) and data loss prevention (DLP) strategies.
• Compliance & Governance: Familiarity with common security frameworks and compliance standards (e.g., NIST, CIS Benchmarks).
• Firewalls & WAFs: Experience configuring and managing cloud-native firewalls and Web Application Firewalls.

Skills:

• Problem-Solving: Excellent analytical and problem-solving abilities.
• Communication: Strong verbal and written communication skills, with the ability to explain complex technical concepts clearly.
• Collaboration: Proven ability to work effectively in cross-functional teams.
• Leadership: Ability to lead projects, drive initiatives, and mentor team members.
• Adaptability: Eagerness to learn new technologies and adapt to evolving security threats and industry trends.

Education: Bachelor's degree in Computer Science