About Temenos
Temenos powers a world of banking that creates opportunities for billions of people and businesses everywhere. We have been doing this for over 30 years through the pioneering spirit of our Temenosians who are passionate about making banking better, together.We serve over 3000 clients from the largest to challengers and community banks in 150+ countries. We collaborate with clients to build new banking services and state-of-the-art customer experiences on our open banking platform, helping them operate more sustainably.At Temenos, we have an open-minded and inclusive culture, where everyone has the power to create their own destiny and make a positive contribution to the world of banking and society.
THE ROLE
The Cloud Security Engineer will act as the most senior technical authority within the Cloud Security Operations team based in India. The role will ensure the security of our banking clients in public and private cloud as part of our SaaS banking services. The role will ensure that our cloud deployments and cloud infrastructure and associated services meets our cloud security standards including defining and maintaining security controls. The role is pivotal in ensuring that our client projects are deployed successfully to cloud with strong security posture. The role will support and interact with other Temenos teams both within and external to the Cloud Security global team including Cloud Operations, Cloud Architecture, Cyber Defence Centre, Information security, Regional Engineering teams, SRE, Product Security, SaaS Design and Build and our Compliance/Audit/Risk teams. This role may also require interfacing with our SaaS clients directly and the incumbent should be comfortable in such environments, being able to communicate confidently both verbally and in writing.
OPPORTUNITIES
- You will implement, manage, and support Azure cloud security controls, including identity and access management (IAM), network security groups, application gateways, encryption, and key management.
- You will configure, maintain, and optimize Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions to ensure secure internet and application connectivity.
- You will manage and maintain Data Loss Prevention (DLP) policies using Microsoft Purview, ensuring protection of sensitive and regulated information.
- You will collaborate with business and IT teams to ensure data classification, labeling, and protection policies are effectively applied.
- You will monitor and respond to security alerts, incidents, and vulnerabilities related to cloud and data security environments.
- You will support cloud security reviews, audit requests, and risk assessments, ensuring alignment with compliance frameworks and internal policies.
- You will participate in security automation initiatives, leveraging Azure native tools such as Azure Policy, Logic Apps, and Sentinel where applicable.
- You will assist in developing and maintaining security standards, documentation, and SOPs for Azure, Zscaler, and DLP environments.
- You will provide technical guidance to project teams on secure design, deployment, and configuration of Azure and network security solutions.
- You will coordinate with stakeholders for remediation of identified vulnerabilities, ensuring timely closure and audit traceability.
- You will be available for on-call or after-hours support during critical security events, DLP incidents, or urgent cloud issues.
Skills
- You should have bachelor's degree in computer science, Information Security, Engineering, or a related field.
- You should have minimum 5 years of experience in information/cyber security, with a focus on cloud and data protection technologies.
- You should have strong working knowledge of Microsoft Azure, including security services (Azure AD, Defender for Cloud, Policy, Sentinel, Key Vault, etc.).
- You should have hands-on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) configuration, policy management, troubleshooting, and integration.
- You should have experience implementing and managing Data Loss Prevention (DLP) controls using Microsoft Purview (formerly Microsoft Information Protection).
- You should have familiarity with SIEM and SOAR tools (e.g., Microsoft Sentinel) for security monitoring and response.
- You should have solid understanding of network security concepts, identity and access management, and data protection frameworks.
- You should good knowledge of WAF and Firewall technologies.
- You should have good understanding of incident management, change control, and security governance processes.
- You should have strong analytical, documentation, and communication skills able to engage both technical and non-technical stakeholders.
VALUES
- Care You will be a caring leader who puts people first.
- Commit You will be comfortable committing time to the job when required with flexibility to work to meet global demands.
- Collaborate You will be a consensus builder and a collaborator, able to break through challenges with organizational silos.
- Challenge You will not be happy with just meeting targets but always demonstrate a stretch mindset.
SOME OF OUR BENEFITS include:
- Maternity leave: Transition back with 3 days per week in the first month and 4 days per week in the second month
- Civil Partnership: 1 week of paid leave if you're getting married. This covers marriages and civil partnerships, including same sex/civil partnership
- Family care: 4 weeks of paid family care leave
- Recharge days: 4 days per year to use when you need to physically or mentally needed to recharge
- Study leave: 2 weeks of paid leave each year for study or personal development
Please make sure to read our Recruitment Privacy Policy
