Cloud Infra & Network Security Consultant

Job Description

Job Title: Cloud Infra & Network Security Consultant Job Level Level 3 Duties and Responsibilities The Cloud Infra & Network Security Consultant designs, implements, and manages secure cloud infrastructure and network solutions, ensuring the security and integrity of cloud environments through expertise in cloud services and network security protocols. Years of Experience 5 to 8 Years Must Have Nice to Have Domain Expertise Cloud Platforms: Strong expertise in securing public cloud environments like AWS, Azure, or GCP (e.g., IAM, VPC, encryption). Must have hands-on experience with CSPM or CNAPP tools such as Wiz or Prisma Cloud in securing these environments. X Design secure cloud architecture and frameworks for IaaS, PaaS, and SaaS deployments. X Enforce security controls including VPC configurations, encryption, and hardening of virtualized environments(VMs, containers, and Kubernetes), IAM and vulnerability management. X Support integration and implementation of cloud-native security tools. X Conduct cloud configuration reviews, compliance scans, vulnerability assessments and implement mitigation plans. X Threat Mitigation: Ability to address cloud-specific risks like misconfigurations, data breaches, or DDoS attacks. X Compliance and Tools: Familiarity with cloud security standards (e.g., CSA CCM, NIST). X Technical / Functional Skills Extensive experience with AWS and Azure cloud services, including compute, storage, networking, and security features. Must be hands-on with ensuring overall security of these environments, including deployment and management of tools, and oversight of related findings. X Expertise in cloud security controls, IAM, networking, and encryption technologies. X Familarity with tools such as Terraform, Ansible, CloudFOrmation, and kubernetes. X Experience in Implementing cloud security baselines using policy-as-code (Azure Policy, AWS SCPs, OPA). X Extensive experience with CSPM tools (e.g., Wiz, Prisma Cloud, Orca, Dome9) for monitoring misconfigurations and policy drifts. X Familiarity with SIEM, SOAR, vulnerability management systems, endpoint security solutions and cloud-native monitoring solutions. Must know AWS Well-Architected Framework and associated principles. X Strong understanding of Devsecops principles and secure SDLC. X Experience conducting threat modeling and secure design reviews for cloud-native applications. X Compliance: Knowledge of regulatory requirements and industry standards related to cloud security and data protection. X Certifications AWS Certified Solutions Architect X Azure Security or similar certifications X AWS Security Specialty X CISSP X Security+ X General Competencies Ability to evaluate and implement secure multi-cloud architectures X Strong collaboration across cross-functional and geographically distributed teams X Proactive risk identification and mitigation planning X Effective communication of technical risks to non-technical stakeholders X