Cloud Security Engineer

India Health Link; Bengaluru; Remote; INR 1,200,000 - 2,500,000; Full time

Job summary

India Health Link is seeking a Cloud Security Engineer to safeguard our AWS and Azure environments, focusing on network architecture, access control, threat monitoring, and compliance across the deployment lifecycle.

In this remote role based in India, you will design secure VPCs, manage IAM, monitor using CloudWatch/Azure Monitor, work with DevOps on secure CI/CD, and ensure CIS benchmarks are followed across databases like Snowflake, PostgreSQL, and MySQL.

Qualifications

• 3+ years in cloud security or cloud engineering with a security focus.
• Experience using AWS/Azure security services (IAM, VPC/VNet, WAF, monitoring).
• Proficiency with Terraform/CloudFormation and secure IaC practices.

Responsibilities

• Secure cloud infrastructure including VPC/VNet and IAM across AWS and Azure.
• Implement and monitor security controls, threat detection, and incident response.
• Collaborate with DevOps for secure CI/CD and IaC practices.
• Manage secrets, keys, and certificates; ensure backups and disaster recovery.
• Ensure compliance with CIS benchmarks and security baselines.

Skills

AWS security

Azure security

Network design

Terraform

CloudFormation

WAF

IAM

Python scripting

Security monitoring

Tools

Snowflake

PostgreSQL

MySQL

SIEM

Job description

Location: Remote - India

Job Type: Full-Time

Role Overview

We are looking for a Cloud Security Engineer to join our global infrastructure team. This role is primarily responsible for securing our AWS and Azure environments - network architecture, access control, threat monitoring, compliance, and application-level security - with secondary involvement in cloud provisioning and DevOps support to ensure security is embedded across the deployment lifecycle.

Key Responsibilities

Cloud-Level Security (Primary)

• Design, manage, and secure VPC/VNet architecture - subnets (public/private), route tables, NAT gateways, peering, and network segmentation.
• Configure and audit security groups, NACLs, and firewall rules to enforce least-privilege network access.
• Manage identity and access controls (IAM roles, policies, service principals) across AWS and Azure.
• Monitor cloud environments for security threats, misconfigurations, and anomalous activity using CloudWatch, Azure Monitor, and SIEM/security dashboards.
• Secure cloud-based databases (Snowflake, PostgreSQL, MySQL) - encryption at rest/in transit, access management, audit logging.
• Manage secrets, keys, and certificates (KMS, Key Vault, Secrets Manager).
• Ensure resources follow security baselines, compliance standards (e.g., CIS benchmarks), and governance policies.
• Conduct root cause analysis for security incidents and maintain incident response runbooks.
• Manage backup, recovery, and disaster-resilience posture for critical workloads.
• Maintain security documentation, network diagrams, and operational playbooks.

Application-Level Security (Primary)

• Review application architecture for security gaps (authentication, authorization, data exposure).
• Support secure API design - token management, rate limiting, input validation at the gateway/WAF level.
• Configure and manage WAF rules to protect against common exploits (OWASP Top 10).
• Support vulnerability scanning and patch management for application-layer components.
• Collaborate with dev teams on secure coding practices and dependency/vulnerability checks in CI/CD pipelines.

Cloud Services DevOps (Secondary)

• Support provisioning of compute, storage, and networking resources in AWS and Azure with security-first configurations.
• Automate secure deployments and configuration using Terraform or CloudFormation, including VPC/subnet as code.
• Support CI/CD workflows with DevOps teams, embedding security checks (SAST/DAST, secrets scanning) into the pipeline.
• Support scaling and capacity planning for production and staging environments.

Preferred Qualifications

• 3+ years of hands-on experience in cloud security or cloud administration/engineering with a security focus.
• Strong working knowledge of AWS and/or Azure security services (IAM, VPC/VNet, security groups/NACLs, WAF, monitoring, logging).
• Experience designing or managing network architecture (subnets, routing, peering, segmentation).
• Experience securing databases in cloud environments (Snowflake, PostgreSQL, MySQL).
• Proficiency in Terraform/CloudFormation with attention to secure IaC practices.
• Familiarity with application security concepts (OWASP Top 10, WAF, API security).
• Familiarity with cloud monitoring and threat detection tools.
• Scripting skills in Python, Bash, or PowerShell for security automation.

Soft Skills

• Strong troubleshooting and incident-response mindset.
• Effective communicator in remote and cross-functional teams.
• Detail-oriented with a proactive, risk-aware approach.
• Ability to prioritize under pressure in a fast-changing environment.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.