Cloud Security Engineer

This role is for one of the Weekday's clients

Salary range: Rs 1000000 - Rs 2500000 (ie INR 10 - 25 LPA)

Min Experience: 5+ years

Location: Pune
JobType: full-time

We are looking for a highly skilled Cloud Security Engineer with 5–7 years of experience in designing, implementing, and maintaining secure cloud environments. The ideal candidate will have deep expertise in Cloud Security and Identity & Access Management (IAM), with a strong understanding of cloud-native security controls, access governance, and compliance best practices.

In this role, you will work closely with engineering, DevOps, and infrastructure teams to strengthen the organization's cloud security posture, implement least-privilege access models, and ensure secure deployment practices across cloud platforms. You will play a critical role in protecting cloud infrastructure, applications, and sensitive data from evolving cyber threats while supporting business scalability and operational excellence.

Requirements

Key Responsibilities

• Design, implement, and manage security controls across cloud environments to ensure confidentiality, integrity, and availability.
• Develop and maintain Identity & Access Management (IAM) policies, roles, permissions, and access controls based on the principle of least privilege.
• Monitor cloud infrastructure for security vulnerabilities, misconfigurations, and compliance deviations using cloud-native and third-party security tools.
• Implement secure authentication mechanisms, including multi-factor authentication (MFA), single sign-on (SSO), and role-based access control (RBAC).
• Collaborate with DevOps and engineering teams to integrate security best practices into CI/CD pipelines and cloud deployments.
• Conduct security assessments, risk analyses, and cloud configuration reviews to identify and remediate potential security gaps.
• Investigate security incidents, perform root cause analysis, and support incident response activities.
• Implement logging, monitoring, and alerting solutions to detect suspicious activities across cloud environments.
• Support regulatory compliance initiatives by ensuring cloud environments adhere to industry security standards and organizational policies.
• Document security architectures, IAM standards, operational procedures, and technical recommendations.

Required Skills

Must-Have Skills

• Strong hands-on experience in Cloud Security across public cloud platforms such as AWS, Azure, or Google Cloud Platform (GCP).
• Extensive expertise in Identity & Access Management (IAM), including user lifecycle management, access governance, privilege management, and authentication protocols.
• Strong understanding of cloud networking, security groups, firewalls, encryption, and key management services.
• Experience implementing Zero Trust security principles and least-privilege access models.
• Knowledge of identity federation technologies including SAML, OAuth 2.0, OpenID Connect (OIDC), and LDAP/Active Directory.
• Experience with cloud security monitoring, vulnerability management, and security compliance frameworks.
• Familiarity with Infrastructure as Code (IaC) security concepts and secure cloud provisioning.

Good-to-Have Skills

• Experience with Cloud Security Posture Management (CSPM) solutions.
• Knowledge of container and Kubernetes security.
• Familiarity with SIEM, SOAR, and endpoint security solutions.
• Experience automating security operations using Python, PowerShell, or Bash.
• Understanding of DevSecOps methodologies and secure software development practices.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
• 5–7 years of experience in cloud infrastructure, cybersecurity, or cloud security engineering.
• Relevant cloud or security certifications such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CISSP, CCSP, or equivalent are highly preferred.