Cloud Security Engineer - AWS / Azure

Overview :

We are seeking a skilled and detail-oriented Cloud Security Engineer with strong expertise in AWS, Azure, DevSecOps practices, Terraform, and Cloud Security tools like Wiz.

The ideal candidate will play a critical role in designing, implementing, and managing secure cloud infrastructures and enforcing IAM guardrails and governance policies.

You will work closely with cloud architects, DevOps teams, and security leadership to ensure the security and compliance of our cloud environments.

Key Responsibilities :

- Lead and support DevSecOps practices in CI/CD pipelines, integrating security at every stage of the software development lifecycle.

- Define and implement IAM guardrails and governance policies, ensuring the principle of least privilege and role-based access control (RBAC).

- Deploy and manage Wiz for cloud security posture management and threat detection across multi-cloud environments.

- Collaborate with stakeholders to assess risks and implement cloud-native security controls.

- Ensure compliance with security standards such as CIS Benchmarks, NIST, ISO 27001, etc.

- Develop and manage automation scripts and security as code for efficient and repeatable cloud deployments.

- Work closely with internal audit, governance, and compliance teams to ensure ongoing compliance and remediation.

- Stay updated with the latest cloud security trends and threat intelligence to proactively defend cloud environments.

Required Skills And Qualifications :

- Deep understanding of DevSecOps, CI/CD pipelines, and security automation.

- Proficient in Terraform and Infrastructure as Code (IaC) best practices.

- Experience implementing and managing cloud IAM guardrails and policies.

- Practical knowledge of cloud security frameworks and compliance standards.

- Experience using Wiz or similar tools (e.g., Prisma Cloud, Orca Security, etc.) for CSPM.

- Familiarity with System Manager (SSM) and security monitoring tools in AWS/Azure.

- Scripting skills in Python, Bash, or PowerShell for automation purposes.

- Strong problem-solving and communication skills with the ability to work in a cross-functional environment.

Preferred Qualifications :

- Experience with other DevSecOps tools like Aqua, Snyk, or Checkov is a plus.

- Knowledge of Kubernetes security and container security tools.