Cloud Security Engineer

Good co India; United Arab Emirates; On-site; AED 240,000 - 420,000; Full time

Job summary

Good co India is seeking a senior Cloud Security Specialist to design, implement, and manage secure cloud environments across AWS, Azure, and Google Cloud Platform. The role emphasizes IAM, RBAC, MFA, and Zero Trust while ensuring governance, risk assessment, and incident response in a UAE context.

Candidates should have 5–10 years in cloud security, strong hands-on architecture skills, and experience with Terraform, CI/CD security, and Kubernetes/NKaaS security.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Security, or related technical discipline.
• 5 to 10 years of experience in Cloud Security, Cybersecurity Engineering, Cloud Infrastructure Security, or Information Security roles.
• Strong hands-on experience securing AWS, Microsoft Azure, and/or Google Cloud Platform environments.
• Proven experience designing and implementing cloud security architectures, controls, governance models, and security best practices.
• Strong knowledge of IAM, PAM, RBAC, MFA, SSO, Zero Trust Architecture, encryption, PKI, and secrets management.

Responsibilities

• Design, implement, and maintain secure cloud environments across AWS, Azure, and GCP.
• Develop and enforce cloud security architecture, policies, standards, and governance frameworks.
• Perform cloud security assessments, risk analysis, threat modeling, and architecture reviews for cloud workloads.
• Implement security controls for cloud infrastructure, applications, networks, identities, and data protection.
• Monitor cloud environments for security threats, misconfigurations, vulnerabilities, and compliance risks.
• Support incident response, threat investigation, containment, remediation, and root cause analysis for cloud security incidents.
• Implement DevSecOps practices by integrating security controls into CI/CD pipelines and software development workflows.

Skills

Cloud security

AWS

Azure

GCP

IAM

Zero Trust

Kubernetes security

CI/CD security

Python scripting

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Terraform

CloudFormation

Kubernetes

CI/CD tools

Job description

Role & responsibilities

• Design, implement, and maintain secure cloud environments across AWS, Microsoft Azure, and Google Cloud Platform.
• Develop and enforce cloud security architecture, policies, standards, and governance frameworks.
• Perform cloud security assessments, risk analysis, threat modeling, and architecture reviews for cloud workloads.
• Implement security controls for cloud infrastructure, applications, networks, identities, and data protection.
• Manage cloud identity and access management (IAM), privileged access management (PAM), role-based access control (RBAC), and authentication mechanisms.
• Design and implement Zero Trust security principles across cloud platforms.
• Secure cloud networking components including VPC/VNet, security groups, firewalls, VPN, private endpoints, WAF, and network segmentation.
• Implement and manage cloud security tools including CSPM, CWPP, SIEM, SOAR, vulnerability scanners, and security monitoring platforms.
• Monitor cloud environments for security threats, misconfigurations, vulnerabilities, and compliance risks.
• Support incident response, threat investigation, containment, remediation, and root cause analysis for cloud security incidents.
• Implement DevSecOps practices by integrating security controls into CI/CD pipelines and software development workflows.
• Secure Infrastructure as Code (IaC) deployments using Terraform, CloudFormation, ARM Templates, and security automation practices.
• Perform security reviews for Kubernetes, containers, APIs, serverless applications, and cloud-native workloads.
• Manage encryption, key management, secrets management, and data protection solutions.
• Ensure compliance with security frameworks including ISO 27001, NIST, CIS Benchmarks, PCI DSS, and GDPR.
• Collaborate with cloud engineers, DevOps teams, security operations, application teams, and business stakeholders.
• Create security documentation including cloud security standards, architecture diagrams, procedures, and incident response playbooks.
• Evaluate emerging cloud security technologies and recommend improvements to strengthen security posture.

Preferred candidate profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Security, or a related technical discipline.
• 5 to 10 years of experience in Cloud Security, Cybersecurity Engineering, Cloud Infrastructure Security, or Information Security roles.
• Strong hands-on experience securing AWS, Microsoft Azure, and/or Google Cloud Platform environments.
• Proven experience designing and implementing cloud security architectures, controls, governance models, and security best practices.
• Strong knowledge of IAM, PAM, RBAC, MFA, SSO, Zero Trust Architecture, encryption, PKI, and secrets management.
• Experience securing cloud networking components including VPC/VNet, VPN, firewalls, security groups, WAF, load balancers, and private connectivity.
• Hands-on experience with CSPM, CWPP, SIEM, SOAR, EDR, vulnerability management, and cloud monitoring tools.
• Strong experience with cloud security solutions such as AWS IAM, AWS KMS, Azure Entra ID, Azure Key Vault, Microsoft Defender for Cloud, and Cloud Security tools.
• Experience with DevSecOps, CI/CD security, Infrastructure as Code (Terraform, CloudFormation, ARM Templates), and security automation.
• Knowledge of Kubernetes security, Docker security, container security, serverless security, and API security.
• Experience with threat modeling, vulnerability assessment, penetration testing, incident response, and security investigations.
• Strong understanding of cybersecurity frameworks including NIST CSF, ISO 27001, CIS Benchmarks, PCI DSS, and GDPR.
• Scripting and automation experience using Python, PowerShell, or Bash is preferred.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Experience working with enterprise cloud environments, security audits, and cross-functional teams.

Preferred certifications

• CCSP (Certified Cloud Security Professional)
• CISSP
• CISM
• AWS Certified Security Specialty
• AWS Certified Solutions Architect Professional
• Microsoft Certified: Cybersecurity Architect Expert
• Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• Certified Kubernetes Security Specialist (CKS)
• Terraform Associate
• ISO 27001 Lead Auditor / Lead Implementer