Cloud Security Engineer- Immediate Joiners

Keka Inc.; Bengaluru; Remote; INR 1,200,000 - 1,800,000; Full time

Job summary

Keka Inc. is seeking a Cloud Security Engineer to protect our AWS and Azure environments. The role emphasizes network security, access control, threat monitoring, and secure deployment practices across the CI/CD lifecycle.

The ideal candidate will design secure cloud architectures, manage encryption and secrets, and collaborate with DevOps to embed security in the deployment process. Remote India-based work is available full-time.

Qualifications

• 3+ years hands-on cloud security or cloud engineering with a security focus.
• Strong knowledge of AWS/Azure security services (IAM, VPC/VNet, security groups/NACLs, WAF, logging).
• Experience securing cloud architectures and databases.

Responsibilities

• Design, manage and secure VPC/VNet architectures with subnets and peering.
• Configure and audit security groups, NACLs, and firewall rules for least-privilege access.
• Manage IAM roles, policies and service principals across AWS and Azure.
• Monitor for threats using CloudWatch, Azure Monitor and SIEM dashboards.
• Secure cloud databases (Snowflake, PostgreSQL, MySQL) with encryption and access control.
• Manage keys, secrets via KMS/Key Vault/Secrets Manager.
• Ensure CIS benchmarks and governance compliance across resources.
• Develop incident response runbooks and perform root-cause analysis.
• Maintain backup, disaster recovery and security documentation.

Skills

AWS security

Azure security

VPC/VNet security

IAM & access control

Threat monitoring

Cloud compliance (CIS)

App security concepts (OWASP)

Security incident response

Python/Bash scripting

DevSecOps collaboration

Tools

Terraform

CloudFormation

Job description

Cloud Security Engineer- Immediate Joiners

3+ Years

Full-Time

Location: Remote – India

Job Type: Full-Time

Role Overview

We are looking for a Cloud Security Engineer to join our global infrastructure team. This role is primarily responsible for securing our AWS and Azure environments — network architecture, access control, threat monitoring, compliance, and application-level security — with secondary involvement in cloud provisioning and DevOps support to ensure security is embedded across the deployment lifecycle.

Key Responsibilities

Cloud-Level Security (Primary)

• Design, manage, and secure VPC/VNet architecture — subnets (public/private), route tables, NAT gateways, peering, and network segmentation.
• Configure and audit security groups, NACLs, and firewall rules to enforce least-privilege network access.
• Manage identity and access controls (IAM roles, policies, service principals) across AWS and Azure.
• Monitor cloud environments for security threats, misconfigurations, and anomalous activity using CloudWatch, Azure Monitor, and SIEM/security dashboards.
• Secure cloud-based databases (Snowflake, PostgreSQL, MySQL) — encryption at rest/in transit, access management, audit logging.
• Manage secrets, keys, and certificates (KMS, Key Vault, Secrets Manager).
• Ensure resources follow security baselines, compliance standards (e.g., CIS benchmarks), and governance policies.
• Conduct root cause analysis for security incidents and maintain incident response runbooks.
• Manage backup, recovery, and disaster-resilience posture for critical workloads.
• Maintain security documentation, network diagrams, and operational playbooks.

Application-Level Security (Primary)

• Review application architecture for security gaps (authentication, authorization, data exposure).
• Support secure API design — token management, rate limiting, input validation at the gateway/WAF level.
• Configure and manage WAF rules to protect against common exploits (OWASP Top 10).
• Support vulnerability scanning and patch management for application-layer components.
• Collaborate with dev teams on secure coding practices and dependency/vulnerability checks in CI/CD pipelines.
• Support provisioning of compute, storage, and networking resources in AWS and Azure with security-first configurations.
• Automate secure deployments and configuration using Terraform or CloudFormation, including VPC/subnet as code.
• Support CI/CD workflows with DevOps teams, embedding security checks (SAST/DAST, secrets scanning) into the pipeline.
• Support scaling and capacity planning for production and staging environments.

Preferred Qualifications

• 3+ years of hands-on experience in cloud security or cloud administration/engineering with a security focus.
• Strong working knowledge of AWS and/or Azure security services (IAM, VPC/VNet, security groups/NACLs, WAF, monitoring, logging).
• Experience designing or managing network architecture (subnets, routing, peering, segmentation).
• Experience securing databases in cloud environments (Snowflake, PostgreSQL, MySQL).
• Proficiency in Terraform/CloudFormation with attention to secure IaC practices.
• Familiarity with application security concepts (OWASP Top 10, WAF, API security).
• Familiarity with cloud monitoring and threat detection tools.
• Scripting skills in Python, Bash, or PowerShell for security automation.

Soft Skills

• Strong troubleshooting and incident-response mindset.
• Effective communicator in remote and cross-functional teams.
• Detail-oriented with a proactive, risk-aware approach.
• Ability to prioritize under pressure in a fast-changing environment.