Job
Description
Engineer, Pune We are looking for a highly skilled Cloud Engineer with a strong background in cloud governance to join our Enterprise Cloud Platform - Infrastructure team. This role focuses on building and maintaining governance frameworks across our multi-account, multi-region cloud environments to ensure consistent security, compliance, cost control, and policy enforcement . You'll work closely with cloud platform engineers, security teams, AppEng, and stakeholders across the enterprise to drive guardrails, automation, and governance at scale. Responsibilities Design, implement, and maintain multi-cloud governance frameworks covering identity, access management, cost controls, policy enforcement, tagging strategies, and workload placement. Develop and manage policy-as-code using tools such as Azure Policy, AWS SCPs/Config, and GCP Organization Policy Service. Support the design and operationalization of cloud landing zones across cloud providers. Partner with Security, FinOps, and DevOps to ensure compliance with regulatory and internal standards. Build automation and CI/CD pipelines to enforce cloud governance and compliance at scale. Contribute to the creation and maintenance of governance documentation, knowledge articles, and engineering enablement playbooks. Analyze cloud usage and recommend optimization strategies, applying cost governance principles across environments. Stay up to date on cloud platform capabilities, features, and roadmap to proactively influence governance strategy. Qualifications 4+ years of experience in a cloud engineering or cloud governance role. Hands-on experience with governance in AWS, Azure, and GCP, including: IAM best practices (IAM, Azure RBAC, GCP IAM) Cloud-native policy engines (Azure Policy, AWS Config/SCP, GCP Org Policy) Resource tagging and inventory management Monitoring and alerting tools Proficiency in infrastructure-as-code (Terraform, Bicep, CloudFormation). Strong scripting skills (e.g., Python, PowerShell, Bash). Familiarity with compliance frameworks (e.g., SOC 2, HIPAA, NIST, CIS). Knowledge of cloud-native security and FinOps practices. Preferred Qualifications Experience deploying and operating cloud landing zones or enterprise-scale architectures. Experience with Kubernetes governance in cloud-native environments (AKS, EKS, GKE). Certifications such as: AWS Certified Security – Specialty Azure Security Engineer Associate Google Professional Cloud Security Engineer Terraform Associate (HashiCorp) Strong interpersonal and communication skills; able to work cross-functionally with engineering, security, and finance teams. Show more Show less
