Cloud Security Architect, Secrets Management & Key Vault

Role: Cloud Security Architect Secrets Management & Key Vault

Exp: 5+ years

Location : Hyderabad, Bangalore, Chennai, Greater Noida

Notice: Immediate to 60 days

Role Overview

secrets management

Key Responsibilities

• Architecture & Design

• Define and implement enterprise-grade secrets management solutions using

  HashiCorp Vault

  ,

  AWS KMS

  , and

  Azure Key Vault

  .
• Develop secure architectures for multi-cloud environments (AWS, Azure) with strong emphasis on

  Zero Trust

  and

  least privilege principles

  .
• Create high-level and low-level design documents for key management and encryption workflows.

• Secrets & Key Management

• Manage lifecycle of cryptographic keys (create, rotate, revoke) across hybrid environments.
• Implement

  PKI

  , certificate authority functions, and secure SSH access.
• Integrate Vault with CI/CD pipelines and DevOps tools (Terraform, Ansible, Jenkins).

• Cloud Security

• Design secure cloud architectures leveraging

  AWS IAM

  ,

  Azure AD

  , and

  role-based access control

  .
• Implement

  Infrastructure as Code (IaC)

  for secure deployments using Terraform and Azure Resource Manager templates.
• Ensure compliance with FIPS 140-2, GDPR, and other regulatory standards.

• Operational Excellence

• Configure monitoring and alerting for secrets management systems.
• Conduct vulnerability assessments and remediation for cloud and on-prem environments.
• Provide guidance on disaster recovery and high availability for key vault systems.

Required Skills & Experience

• 516 years in cybersecurity and cloud architecture.
• Hands-on experience with

  HashiCorp Vault

  ,

  Azure Key Vault

  , and

  AWS KMS

  .
• Strong knowledge of

  PKI

  , encryption standards (AES, RSA), and identity management.
• Proficiency in scripting (PowerShell, Bash) and automation tools.
• Certifications preferred:
• HashiCorp Certified: Vault Associate
• Microsoft Certified: Azure Security Engineer Associate
• AWS Certified Security – Specialty
• CISSP or CCSP

Desired Skills

• Experience with hybrid deployments and multi-region replication.
• Familiarity with container orchestration (Kubernetes) and microservices security.
• Strong communication and stakeholder engagement skills.