cybersecurity sme

Cloudxtreme; Hyderabad; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Cloudxtreme in Hyderabad, India seeks an experienced security professional to design, deploy, and manage clientless VPN and ZTNA solutions within enterprise environments. The role emphasizes 7+ years in network security and a proven track record delivering secure architectures.

The candidate will work with hybrid/multi-cloud environments (AWS, Azure, GCP), handle SSL/TLS/PKI, and implement identity federation protocols to ensure robust access control.

Qualifications

• 7+ years in network security, cybersecurity architecture, or information security engineering.
• 5+ years designing, deploying, and managing clientless VPN or ZTNA in enterprises.
• Experience with hybrid/multi-cloud environments (AWS, Azure, GCP) and cloud security services.
• Strong knowledge of SSL/TLS, PKI, and cryptographic standards.

Responsibilities

• Designed and delivered complex security architectures from requirements to deployment.
• Managed clientless VPN or ZTNA solutions in enterprise settings.
• Worked with hybrid/multi-cloud setups and cloud-delivered security services.
• Applied knowledge of SSL/TLS, PKI, and identity federation protocols to secure access.

Skills

Network security

Cybersecurity architecture

Information security engineering

ZTNA / clientless VPN

Cloud security (hybrid/multi-cloud)

TLS/PKI

Identity federation protocols

TCP/IP / Networking

Web security principles

Job description

Role & responsibilities

• 7+ years of progressive experience in network security, cybersecurity architecture, or information security engineering.
• 5+ years of hands-on experience designing, deploying, and managing clientless VPN or ZTNA solutions in enterprise environments.
• Proven track record of delivering complex security architecture projects from requirements through production deployment.
• Experience with hybrid and multi-cloud environments (AWS, Azure, GCP) and cloud-delivered security services.
• Deep knowledge of SSL/TLS protocols, certificate management (PKI), and cryptographic standards.
• Proficiency with identity federation protocols: SAML, OAuth 2.0, OIDC, LDAP, and RADIUS.
• Strong understanding of TCP/IP networking, DNS, HTTP/HTTPS, WebSockets, and reverse proxy architectures.
• Experience with endpoint posture assessment frameworks (HIP, Device Trust, Conditional Access).
• Familiarity with SD-WAN, micro-segmentation, and network access control (NAC) technologies.
• Knowledge of web application security principles (OWASP Top 10, injection attacks, session management.

Preferred candidate profile

Immediate Joiners