Senior IT Cloud Security Engineer (Remote, India)

About the role

This remote position in India reports to the Head of Technology Operations & Security. Its purpose is to design, implement and manage the organisation's end-to-end security posture across AWS and Azure cloud environments, endpoints, data, communications and systems, applying Zero Trust principles across identity, access, data and infrastructure. It also leads SecOps and SOC operations to protect against cyber threats, ensure compliance and maintain operational resilience.

Key responsibilities

• Multi-cloud security architecture: design secure cloud architectures and harden environments using AWS (EC2, S3, RDS, IAM, VPC, CloudFormation, Route 53, CloudWatch) and Azure (VMs, Storage, Networking, Azure AD, Synapse), applying Zero Trust principles
• Cloud security posture reviews and audits against ISO 27001, NIST, CIS and SCA frameworks
• Secure Microsoft 365, Exchange, Active Directory and Windows Server environments, with Conditional Access, MFA, PAM and identity federation
• Oversee infrastructure BAU (backups, patching, monitoring, capacity) and lead SecOps, including endpoint patching, vulnerability remediation and system hardening on Windows and Linux
• Implement CI/CD pipelines (Azure DevOps, AWS CodePipeline, GitHub Actions) and IaC with Terraform, CloudFormation, ARM, Bicep and Ansible, integrating SAST, DAST and dependency scanning
• Run SOC operations with SIEM/SOAR tools (Azure Sentinel, Splunk, AWS Security Hub), lead incident response and root cause analysis
• Run vulnerability assessments, penetration tests and compliance reviews, define risk treatment plans, maintain security documentation, and implement DR and business continuity strategies

Required profile

• Bachelor's degree in Computer Science, Information Security or related field (Master's preferred)
• 10+ years of IT and security experience, with at least 5 years in multi-cloud (AWS and Azure) security
• Proven track record designing and managing cloud and hybrid security architectures, and hands-on experience with Zero Trust
• Certification: CISSP or CCSP (required); AWS Certified Security – Specialty, Microsoft Cybersecurity Architect Expert or Azure Security Engineer Associate, and ISO 27001 Lead Implementer or Zero Trust Certified Architect are advantages

Required skills

• AWS and Azure cloud security, IAM, PAM, MFA and Conditional Access
• IaC with Terraform, CloudFormation, ARM, Bicep and Ansible
• SOC and SecOps operations, EDR, patching and DLP
• DevSecOps and CI/CD integration (Azure DevOps preferred)
• Networking, firewalls, VPN and hybrid connectivity security
• Knowledge of ISO 27001, NIST and SCA frameworks