Cloud Security Architect, Secrets Management & Key Vault

Purview Services; Chandigarh; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Purview Services in India seeks a Cloud Security Architect to design and implement secure secrets management, key vaults, and cloud security across AWS and Azure using Vault, Azure Key Vault, and KMS. Location options include Hyderabad, Bangalore, Chennai, and Greater Noida with an immediate to 60 days notice.

You will drive architecture, PKI, encryption standards, IaC with Terraform and Azure templates, and ensure compliance with FIPS 140-2 and GDPR. 5+ years of experience required.

Qualifications

• 5+ years in cybersecurity and cloud architecture.
• Hands-on with Vault, Azure Key Vault, and AWS KMS.
• Strong PKI, encryption (AES, RSA), and identity management.
• Proficient in scripting and automation (PowerShell, Bash).
• Relevant certifications are preferred.

Responsibilities

• Architecture & design of enterprise-grade secrets management using Vault, AWS KMS, and Azure Key Vault.
• Develop secure multi-cloud architectures (AWS, Azure) with Zero Trust and least privilege.
• Create design docs for key management and encryption workflows.
• Manage cryptographic keys lifecycle and PKI functions; secure SSH access.
• Integrate Vault with CI/CD pipelines (Terraform, Ansible, Jenkins).
• Ensure compliance with FIPS 140-2, GDPR and other standards.
• Configure monitoring and incident response for secret management systems.

Skills

5+ years in cybersecurity

Cloud security architecture

Zero Trust

Least privilege

Scripting: PowerShell Bash

Education

HashiCorp Vault Associate

Azure Security Engineer Associate

AWS Certified Security – Specialty

CISSP or CCSP

Tools

HashiCorp Vault

Azure Key Vault

AWS KMS

Terraform

Ansible

Jenkins

CI/CD pipelines

Job description

Role: Cloud Security Architect Secrets Management & Key Vault

Exp: 5+ years

Location : Hyderabad, Bangalore, Chennai, Greater Noida

Notice: Immediate to 60 days

Role Overview

The Cloud Security Architect will design and implement secure architectures for secrets management, encryption key lifecycle, and cloud security across AWS and Azure environments. This role focuses on integrating HashiCorp Vault, Azure Key Vault, and related technologies to ensure robust data protection and compliance.

Key Responsibilities

• Architecture & Design
  • Define and implement enterprise-grade secrets management solutions using HashiCorp Vault, AWS KMS, and Azure Key Vault.
  • Develop secure architectures for multi-cloud environments (AWS, Azure) with strong emphasis on Zero Trust and least privilege principles.
  • Create high-level and low-level design documents for key management and encryption workflows.
• Secrets & Key Management
  • Manage lifecycle of cryptographic keys (create, rotate, revoke) across hybrid environments.
  • Implement PKI, certificate authority functions, and secure SSH access.
  • Integrate Vault with CI/CD pipelines and DevOps tools (Terraform, Ansible, Jenkins).
• Cloud Security
  • Design secure cloud architectures leveraging AWS IAM, Azure AD, and role-based access control.
  • Implement Infrastructure as Code (IaC) for secure deployments using Terraform and Azure Resource Manager templates.
  • Ensure compliance with FIPS 140-2, GDPR, and other regulatory standards.
• Operational Excellence
  • Configure monitoring and alerting for secrets management systems.
  • Conduct vulnerability assessments and remediation for cloud and on-prem environments.
  • Provide guidance on disaster recovery and high availability for key vault systems.

Required Skills & Experience

• 516 years in cybersecurity and cloud architecture.
• Hands‑on experience with HashiCorp Vault, Azure Key Vault, and AWS KMS.
• Strong knowledge of PKI, encryption standards (AES, RSA), and identity management.
• Proficiency in scripting (PowerShell, Bash) and automation tools.
• Certifications preferred:
  • HashiCorp Certified: Vault Associate
  • Microsoft Certified: Azure Security Engineer Associate
  • AWS Certified Security – Specialty
  • CISSP or CCSP

Desired Skills

• Experience with hybrid deployments and multi-region replication.
• Familiarity with container orchestration (Kubernetes) and microservices security.
• Strong communication and stakeholder engagement skills.