Cloud Security Engineer

PwC India; India; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

PwC India is seeking a seasoned Cloud Security Engineer / Security Architect to design and implement secure Azure cloud infrastructure, with multi‑cloud exposure a plus. You will integrate security controls into CI/CD pipelines, automate provisioning with IaC, and govern Identity and Access Management across environments.

The role requires hands‑on expertise in Azure security services, Terraform, ARM/Bicep, Azure DevOps, and scripting.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field.

Responsibilities

• Design, implement, and maintain cloud security architectures in Azure.

Skills

Cloud security

Azure

DevOps

PowerShell

Azure CLI

Terraform

ARM templates

Bicep

Kubernetes

AKS

IAM

Education

Bachelor's degree in CS/IS/Engineering

Tools

Terraform

ARM templates

Bicep

Azure DevOps

GitHub Actions

Azure CLI

Job description

Please do not apply if JD does not align with your skill set.

Role Summary:

We are looking for a highly skilled Cloud Security Engineer / Security Architect with strong hands‑on experience in designing and implementing secure cloud infrastructure, primarily on Azure (with multi‑cloud exposure desirable). This role combines in‑depth cloud security architecture with practical DevOps automation and infrastructure‑as‑code expertise to build secure, scalable, and compliant cloud environments.

Key Responsibilities:

• Design, implement, and maintain cloud security architectures that meet organizational compliance and governance standards, primarily within Azure environments.
• Perform thorough security assessments, vulnerability analysis, and threat modeling for cloud workloads and services.
• Lead the development and enforcement of security policies, controls, and configurations using Azure Policy, Security Center, and Azure Sentinel.
• Collaborate with DevOps teams to embed security controls within CI/CD pipelines using Azure DevOps, ARM templates, Terraform, and related Infrastructure as Code (IaC) tools.
• Automate security workflows including infrastructure provisioning, compliance remediation, and incident response using PowerShell, Azure CLI, and scripting.
• Manage identity and access management (IAM) controls with Azure Active Directory, including RBAC, Conditional Access, and Privileged Identity Management.
• Harden cloud infrastructure components such as AKS clusters, virtual networks, key vaults, load balancers, private endpoints, and storage accounts.
• Monitor security events and alerts, tune security information and event management (SIEM) solutions, and lead investigations of potential security incidents.
• Develop security reference architectures, blueprints, and documentation to guide secure cloud deployments.
• Support cloud migration projects by assessing security risks, defining security requirements, and validating secure configurations.
• Provide guidance and training to development and operations teams on secure coding practices, security tools, and emerging cloud security trends.
• Stay current with the latest security threats, vulnerabilities, and regulatory requirements impacting cloud infrastructure.

Required Skills and Experience

• Bachelors degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience).
• 5+ years of experience in cloud security engineering or security architecture, particularly in Azure environments.
• Deep understanding of cloud security principles, risk management frameworks (e.g., NIST, CIS, CSA), and compliance standards (e.g., GDPR, HIPAA).
• Expertise with Infrastructure as Code (IaC) tools such as Terraform, ARM templates, or Bicep for secure infrastructure provisioning.
• Practical experience with cloud‑native DevOps tools and CI/CD pipelines, specifically Azure DevOps or GitHub Actions.
• Proficient scripting skills in PowerShell, Azure CLI, or Python for automation and orchestration.
• Strong knowledge of Azure security services, including Azure Active Directory, Key Vault, Sentinel, Security Center, Azure Policy, and Azure Firewall.
• Experience securing Kubernetes environments (AKS preferred), including network policies, authentication, and secrets management.
• Familiarity with SIEM tools and security event monitoring, preferably Azure Sentinel or similar.
• Solid networking knowledge including virtual networks, subnets, NSGs, VPNs, ExpressRoute, and private endpoints.
• Experience with identity and access management (IAM), RBAC design, Conditional Access policies, and MFA implementation.
• Ability to interpret and implement organizational security governance and compliance requirements.