Cloud Security Architect

Good co India; India; On-site; INR 2,800,000 - 3,600,000; Full time

Job summary

Good co India is seeking an experienced cloud security architect to design secure, scalable cloud solutions across AWS, Azure and Google Cloud. The role requires implementing IAM/RBAC, MFA, and Zero Trust, with emphasis on secure backs, encryption, and data protection.

You will lead threat modelling, vulnerability assessments, and architecture reviews, while embedding security into CI/CD and DevSecOps. Strong gatekeeping of standards and regulatory compliance is essential, with 5–10 years of

Qualifications

• Bachelor's or master's degree in CS/IT/Cybersecurity or related field.
• 5–10 years in cybersecurity, cloud engineering, or information security with hands‑on cloud security experience.
• Expertise in at least one major cloud platform (AWS, Azure, or GCP); multi‑cloud is a plus.
• Knowledge of IAM, network security, encryption, zero trust, and cloud‑native security services.
• Experience with CSPM, SIEM, vulnerability management, and incident response.

Responsibilities

• Design and implement secure, scalable cloud architectures across AWS, Azure, and GCP.
• Define cloud security strategies, standards, and best practices aligned with regulations.
• Implement IAM, RBAC, MFA, and Zero Trust security principles.
• Secure clouds, networks, workloads, containers, APIs, applications, and data.
• Conduct threat modelling, vulnerability assessments, and architecture reviews.
• Integrate security controls into CI/CD and DevSecOps pipelines.
• Monitor environments with SIEM and CSPM tools to detect threats and coordinate remediation.
• Ensure ISO 27001, NIST, CIS Benchmarks, SOC 2 compliance and regulatory requirements.

Skills

Cloud security architecture

IAM & RBAC

DevSecOps

Threat modelling

Python / Bash scripting

Education

Bachelor's or Master’s in CS/IT or Cybersecurity

Tools

Terraform

CloudFormation

Palo Alto / CISCO security tooling

SIEM

CSPM

Job description

Role & responsibilities

• Design and implement secure, scalable cloud architectures across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Define cloud security strategies, policies, standards, and best practices aligned with business requirements and industry regulations.
• Implement Identity and Access Management (IAM), Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Zero Trust security principles.
• Secure cloud infrastructure, networks, workloads, containers, APIs, applications, and data through appropriate security controls.
• Conduct cloud security assessments, threat modelling, vulnerability assessments, and architecture reviews to identify and mitigate risks.
• Implement encryption, key management, secrets management, data protection, and secure backup and recovery solutions.
• Integrate security controls into CI/CD pipelines and DevSecOps workflows to enable continuous security validation.
• Monitor cloud environments using SIEM, CSPM, and other security tools to detect threats, investigate incidents, and coordinate remediation.
• Ensure compliance with security frameworks and standards such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and applicable regulatory requirements.
• Collaborate with cloud engineers, DevOps teams, application developers, compliance teams, and business stakeholders to embed security throughout the software development lifecycle.
• Develop cloud security reference architectures, technical documentation, security guidelines, and incident response procedures.
• Evaluate emerging cloud security technologies and recommend improvements to strengthen the organisation's security posture.

Preferred candidate profile

• Bachelor's or master's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.
• 5 to 10 years of experience in cybersecurity, cloud engineering, infrastructure security, or information security, including hands-on cloud security architecture experience.
• Strong expertise in at least one major cloud platform: AWS, Microsoft Azure, or Google Cloud Platform; multi-cloud experience is an advantage.
• In-depth knowledge of IAM, network security, encryption, key management, secrets management, Zero Trust, and cloud-native security services.
• Practical experience with cloud security tools, CSPM solutions, SIEM platforms, vulnerability management, and incident response.
• Proficiency in Infrastructure as Code tools such as Terraform or CloudFormation, scripting languages such as Python or Bash, and DevSecOps practices.
• Understanding of container security, Docker, Kubernetes, API security, and CI/CD pipeline protection.
• Knowledge of security and compliance frameworks such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and relevant data protection requirements.
• Strong skills in threat modelling, risk assessment, security architecture reviews, and security control implementation.
• Excellent analytical, problem-solving, communication, and stakeholder-management skills.
• Ability to translate business and regulatory requirements into practical cloud security solutions.
• Preferred certifications: AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CCSP, or CISSP.