Cloud Security Architect

Sathva Cloud Tech; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Sathva Cloud Tech is seeking a hands-on Cloud Security Engineer to strengthen security controls across cloud environments in Bengaluru. The role focuses on implementing security measures, monitoring, and remediation across AWS and/or Azure with emphasis on IAM, networking, and encryption.

The ideal candidate has 6+ years in IT/security engineering, strong IaC and scripting skills, and experience with cloud security monitoring and incident response. Bangalore‑based, WFO.

Qualifications

• Hands-on experience securing AWS and/or Azure environments.
• Strong understanding of IAM/RBAC, VPC/VNet, security groups/NSGs, WAF, KMS/Key Vault and cloud logging.
• Experience with CSPM/CNAPP, vulnerability management, workload protection and cloud security monitoring.
• Working knowledge of Terraform or similar IaC tools, scripting and DevSecOps practices.
• Familiarity with container/Kubernetes security, incident response and hybrid connectivity is preferred.

Responsibilities

• Implement security controls across AWS and/or Azure, including IAM, networking, compute, storage and encryption.
• Configure cloud-native security services and logging, such as AWS CloudTrail, GuardDuty and Security Hub or Microsoft Defender for Cloud and Azure Monitor.
• Assess cloud environments for misconfigurations, exposed assets, excessive privileges and vulnerabilities; drive remediation and integrate logs with SIEM.
• Secure cloud workloads, containers, Kubernetes and CI/CD pipelines through hardening, secrets management and automated checks.
• Use IaC and scripting to automate configuration checks, compliance controls and routine security tasks; support investigations and document runbooks.

Skills

AWS security

Azure security

IAM/RBAC

VPC/VNet

Security monitoring

Terraform

Scripting

DevSecOps

Kubernetes security

Education

Bachelor's degree in CS/IT/Engineering

AWS Certified Security Specialty

Microsoft AZ-500

CCSP

Tools

CloudTrail

GuardDuty

Security Hub

Azure Monitor

Job description

We are looking for a hands-on Cloud Security Engineer to implement and maintain cloud security controls, improve security posture and integrate cloud monitoring with enterprise security operations. The role requires practical engineering ability and strong understanding of cloud security risks.

Notice Period- Immediate Joiners

Key Responsibilities:

• Implement security controls across AWS and/or Microsoft Azure, including IAM, networking, compute, storage and encryption.
• Configure cloud-native security services and logging, such as AWS CloudTrail, GuardDuty and Security Hub or Microsoft Defender for Cloud and Azure Monitor
• Assess cloud environments for misconfigurations, exposed assets, excessive privileges and vulnerabilities; drive remediation. Integrate cloud audit logs, security alerts and workload telemetry with SIEM and incident response workflows.
• Secure cloud workloads, containers, Kubernetes and CI/CD pipelines through hardening, secrets management and automated checks.
• Use infrastructure as code and scripting to automate configuration checks, compliance controls and routine security tasks. Support investigation of cloud security incidents and maintain technical runbooks and configuration documentation.

Required Skills & Experience:

• 6+ years in IT/security engineering with hands-on experience securing AWS and/or Azure environments.
• Strong understanding of IAM/RBAC, VPC/VNet, security groups/NSGs, WAF, KMS/Key Vault and cloud logging.
• Experience with CSPM/CNAPP, vulnerability management, workload protection and cloud security monitoring.
• Working knowledge of Terraform or similar IaC tools, scripting and DevSecOps practices.
• Familiarity with container/Kubernetes security, incident response and hybrid connectivity is preferred.

Education & Preferred Certifications:

• Bachelors degree in computer science, IT, Engineering or equivalent experience.
• Preferred certifications include AWS Certified Security Specialty, Microsoft AZ-500, CCSP or equivalent cloud security credentials.
• Location: Bangalore (WFO)