Azure Cloud Platform Engineering AM

Promaynov Advisory Services Pvt. Ltd; Hyderabad; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

Promaynov Advisory Services Pvt. Ltd is seeking a Senior Cloud Security Engineer to lead enterprise security across identity, network, compute, and data layers. You will define secure patterns, govern policies, and drive privilege controls for multi-tenant platforms.

The role requires deep expertise in cloud security, threat detection, and DevSecOps, and involves on-call rotations and on-site work in Hyderabad, India.

Qualifications

• Deep expertise in cloud security architecture, IAM governance, network security, encryption, and policy-as-code.
• Experience designing and implementing enterprise‑scale security controls.

Responsibilities

• Provide deep technical leadership in cloud security across identity, network, compute, and data layers.
• Lead service onboarding for mission-critical workloads with secure patterns and telemetry requirements.
• Review and approve core platform security changes and IaC module updates.
• Shape platform-wide security strategy and govern policies, standards, and controls.
• Own lifecycle management of cloud security policies, guardrails, and compliance measures.
• Drive access governance initiatives and minimum-privilege enforcement.
• Architect scalable security solutions including network protections and encryption strategies.
• Lead DevSecOps integration across CI/CD pipelines including attestation, SBOM, SAST/DAST, and image hardening.
• Govern release gates, pipeline approvals, and policy-as-code implementations.
• Partner with security operations to enhance detection coverage and automated playbooks.
• Act as senior responder during incidents and guide containment and remediation.
• Influence engineering and product teams to adopt secure practices.
• Represent Platform Security in design reviews and leadership forums.
• Provide clear, concise technical insights to stakeholders.
• Work in rotational shifts and on-call as needed.

Skills

Cloud security architecture

IAM governance

Network security

Encryption

Policy-as-code

DevSecOps

CI/CD security

Threat detection

Incident response

Cloud forensics

Azure DevOps

Tools

Azure DevOps

Job description

Engineering supports the firm by delivering modern platform capabilities, observability

Responsibilities

• Provide deep technical leadership in cloud security, guiding implementation of complex controls across identity, network, compute, and data layers.
• Lead service onboarding for mission‑critical workloads, defining secure patterns and telemetry requirements.
• Review and approve core platform security changes and IaC module updates.
• Shape platform‑wide security strategy and lead adoption of security policies, standards, and governance controls.
• Own lifecycle management of cloud security policies, guardrails, and compliance measures.
• Drive access governance initiatives, privileged access review cycles, and enforcement of minimum‑privilege models.
• Architect scalable and automated security solutions including network perimeter protections, workload identity models, encryption strategies, and secrets management.
• Evaluate and design controls for multi‑environment and multi‑tenant scenarios.
• Lead integration of enterprise‑grade DevSecOps capabilities across CI/CD pipelines including attestation, SBOM, dependency scanning, SAST/DAST, and image hardening.
• Govern release gates, pipeline approvals, and policy‑as‑code implementations.
• Partner with security operations to enhance detection coverage, automated playbooks, and threat intelligence pipelines.
• Act as a senior responder during incidents—guiding containment, analysis, and remediation activities.
• Influence engineering, SRE, platform, and product teams to adopt secure engineering practices.
• Represent the Platform Security function in design assessments, architecture councils, and leadership forums.
• Provide deep technical insights to stakeholders in clear, concise language.
• Work in rotational shifts as required.
• Participate in on‑call rotations to respond to and resolve high‑severity incidents in a timely manner.

Requirements

• Deep expertise in cloud security architecture, IAM governance, network security, encryption, and policy‑as‑code.
• Strong leadership capabilities — able to influence, mentor, and enable multiple engineering teams.
• Demonstrated experience designing and implementing enterprise‑scale security controls.
• Strong grasp of DevSecOps, secure SDLC, CI/CD pipeline security, code signing, and reproducible builds.
• Experienced in threat detection, incident response, and cloud forensics.
• Extensive knowledge of CI/CD pipelining skills using Azure DevOps or equivalent
• Experience of working in an Enterprise environment.
• Works independently, makes strong technical decisions, and drives engineering excellence across teams.