Cyber security SME

Cloudxtreme; Hyderabad; On-site; INR 2,800,000 - 3,600,000; Full time

Job summary

Cloudxtreme is seeking a senior security engineer to lead secure architecture design across on-prem and cloud environments. You will evaluate clientless VPN/ZTNA solutions, enforce PKI and strong authentication, and implement access controls in multi-cloud deployments.

The ideal candidate will bring deep SSL/TLS, SAML/OIDC/OAuth expertise, and hands-on experience with NAC, SD-WAN, and cloud security services to deliver secure, scalable solutions.

Qualifications

• 7+ years in network security, cybersecurity architecture, or information security engineering.
• 5+ years designing, deploying, and managing clientless VPN or ZTNA in enterprises.
• Track record delivering complex security architecture projects end-to-end.
• Hands-on in hybrid/multi-cloud environments (AWS/Azure/GCP) and cloud security services.
• Deep knowledge of SSL/TLS, PKI, and cryptographic standards.
• Proficient with SAML, OAuth 2.0, OIDC, LDAP, and RADIUS.
• Strong TCP/IP, DNS, HTTP/HTTPS, WebSockets, and reverse proxy knowledge.
• Experience with endpoint posture, HIP/Device Trust, CA.
• Familiar with SD-WAN, micro-segmentation, NAC technologies.
• Knowledge of OWASP Top 10 and secure coding practices.

Skills

Security architecture

ZTNA design

Cloud security

PKI TLS

Identity federation

Networking basics

NAC/SD-WAN

OWASP

Job description

Role & responsibilities

Required Technical Skills:

• 7+ years of progressive experience in network security, cybersecurity architecture, or information security engineering.
• 5+ years of hands-on experience designing, deploying, and managing clientless VPN or ZTNA solutions in enterprise environments.
• Proven track record of delivering complex security architecture projects from requirements through production deployment.
• Experience with hybrid and multi-cloud environments (AWS, Azure, GCP) and cloud-delivered security services.
• Deep knowledge of SSL/TLS protocols, certificate management (PKI), and cryptographic standards.
• Proficiency with identity federation protocols: SAML, OAuth 2.0, OIDC, LDAP, and RADIUS.
• Strong understanding of TCP/IP networking, DNS, HTTP/HTTPS, WebSockets, and reverse proxy architectures.
• Experience with endpoint posture assessment frameworks (HIP, Device Trust, Conditional Access).
• Familiarity with SD-WAN, micro-segmentation, and network access control (NAC) technologies.
• Knowledge of web application security principles (OWASP Top 10, injection attacks, session management.

Preferred Skills:

• Active security certifications such as CISSP, CCSP, CISM, PCNSE (Palo Alto), CCNP Security, or vendor-specific ZTNA/SASE certifications.