Cloud Security Engineer- Immediate Joiners

Phigital Care; India; Remote; INR 1,800,000 - 3,000,000; Full time

Job summary

Phigital Care is seeking a Cloud Security Engineer to protect our AWS and Azure environments, focusing on network design, access control, threat monitoring, and compliance. The role involves security across deployment lifecycles, with secondary duties in cloud provisioning and DevOps support.

The ideal candidate will have 3+ years of cloud security experience, strong AWS/Azure service knowledge, and hands-on IaC experience using Terraform or CloudFormation. Remote work option for India available.

Qualifications

• 3+ years of hands-on cloud security or cloud administration with a security focus.
• Strong knowledge of AWS and/or Azure security services (IAM, VPC/VNet, security groups/NACLs, WAF, monitoring, logging).
• Experience designing or managing network architecture (subnets, routing, peering, segmentation).
• Experience securing databases in cloud environments (Snowflake, PostgreSQL, MySQL).
• Proficiency with Terraform/CloudFormation and secure IaC practices.
• Familiarity with OWASP Top 10, WAF, API security.
• Familiarity with cloud monitoring and threat detection tools.
• Scripting skills in Python, Bash, or PowerShell for security automation.

Responsibilities

• Design, manage, and secure VPC/VNet architecture with subnets, routing and segmentation.
• Configure and audit security groups, NACLs, and firewalls for least-privilege access.
• Manage IAM roles, policies, and service principals across AWS and Azure.
• Monitor cloud environments for threats using CloudWatch/Azure Monitor and SIEM dashboards.
• Secure cloud databases with encryption, access control, and audit logging.
• Manage secrets, keys, and certificates (KMS, Key Vault).
• Ensure resources follow CIS benchmarks and governance policies.
• Conduct root cause analysis for security incidents and maintain runbooks.
• Maintain security documentation and incident response playbooks.

Skills

Incident response

Remote collaboration

Risk management

Tools

Terraform

CloudFormation

Python

Bash

PowerShell

AWS

Azure

WAF

SIEM

Job description

Role Overview

We are looking for a Cloud Security Engineer to join our global infrastructure team. This role is primarily responsible for securing our AWS and Azure environments — network architecture, access control, threat monitoring, compliance, and application-level security — with secondary involvement in cloud provisioning and DevOps support to ensure security is embedded across the deployment lifecycle.

Location: Remote – India

Job Type: Full-Time

Role Overview

We are looking for a Cloud Security Engineer to join our global infrastructure team. This role is primarily responsible for securing our AWS and Azure environments — network architecture, access control, threat monitoring, compliance, and application-level security — with secondary involvement in cloud provisioning and DevOps support to ensure security is embedded across the deployment lifecycle.

Key Responsibilities

Cloud-Level Security (Primary)

• Design, manage, and secure VPC/VNet architecture — subnets (public/private), route tables, NAT gateways, peering, and network segmentation.
• Configure and audit security groups, NACLs, and firewall rules to enforce least-privilege network access.
• Manage identity and access controls (IAM roles, policies, service principals) across AWS and Azure.
• Monitor cloud environments for security threats, misconfigurations, and anomalous activity using CloudWatch, Azure Monitor, and SIEM/security dashboards.
• Secure cloud-based databases (Snowflake, PostgreSQL, MySQL) — encryption at rest/in transit, access management, audit logging.
• Manage secrets, keys, and certificates (KMS, Key Vault, Secrets Manager).
• Ensure resources follow security baselines, compliance standards (e.g., CIS benchmarks), and governance policies.
• Conduct root cause analysis for security incidents and maintain incident response runbooks.
• Manage backup, recovery, and disaster-resilience posture for critical workloads.
• Maintain security documentation, network diagrams, and operational playbooks.

Application-Level Security (Primary)

• Review application architecture for security gaps (authentication, authorization, data exposure).
• Support secure API design — token management, rate limiting, input validation at the gateway/WAF level.
• Configure and manage WAF rules to protect against common exploits (OWASP Top 10).
• Support vulnerability scanning and patch management for application-layer components.
• Collaborate with dev teams on secure coding practices and dependency/vulnerability checks in CI/CD pipelines.

Cloud Services & DevOps (Secondary)

• Support provisioning of compute, storage, and networking resources in AWS and Azure with security-first configurations.
• Automate secure deployments and configuration using Terraform or CloudFormation, including VPC/subnet as code.
• Support CI/CD workflows with DevOps teams, embedding security checks (SAST/DAST, secrets scanning) into the pipeline.
• Support scaling and capacity planning for production and staging environments.

Preferred Qualifications

• 3+ years of hands-on experience in cloud security or cloud administration/engineering with a security focus.
• Strong working knowledge of AWS and/or Azure security services (IAM, VPC/VNet, security groups/NACLs, WAF, monitoring, logging).
• Experience designing or managing network architecture (subnets, routing, peering, segmentation).
• Experience securing databases in cloud environments (Snowflake, PostgreSQL, MySQL).
• Proficiency in Terraform/CloudFormation with attention to secure IaC practices.
• Familiarity with application security concepts (OWASP Top 10, WAF, API security).
• Familiarity with cloud monitoring and threat detection tools.
• Scripting skills in Python, Bash, or PowerShell for security automation.

Soft Skills

• Strong troubleshooting and incident‑response mindset.
• Effective communicator in remote and cross‑functional teams.
• Detail‑oriented with a proactive, risk‑aware approach.
• Ability to prioritize under pressure in a fast‑changing environment.