Director Associate Director (Cloud Security Architect)

Nagarro; India; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

Nagarro is seeking an Associate Director (Cloud Security Architect) to lead security architecture for large-scale AWS environments in South Asia. You will design multi-account strategies, IAM controls, and secure cloud patterns to ensure resilient, compliant workloads.

The role demands 13+ years of AWS cloud security experience, strong leadership, and the ability to drive security audits, remediation roadmaps, and collaboration with DevOps, platform engineering, and compliance teams across the

Qualifications

• 13+ years of experience in cloud security engineering and architecture.
• Extensive AWS security expertise including multi-account setups, landing zones and SCPs.
• Strong knowledge of IAM, least-privilege access, and identity federation.
• Hands-on experience securing EC2/EKS, VPCs, network segmentation and private connectivity.
• Proven IaC security experience with Terraform and policy guardrails.
• Experience integrating security checks into CI/CD and DevSecOps workflows.

Responsibilities

• Design and maintain AWS cloud security architecture for large-scale production environments.
• Define secure multi-account environments with landing zones and SCPs.
• Implement least-privilege access controls across cloud identities.
• Enforce secure VPC networking, workload isolation, and private connectivity.
• Establish security baselines for EKS, containers, and images.
• Develop IaC and Policy-as-Code security guardrails.
• Remediate misconfigurations and exposure risks.
• Strengthen data protection with encryption and KMS.

Skills

AWS cloud security

Cloud security architecture

Terraform

Kubernetes

IAM & least privilege

Policy-as-Code

DevSecOps

Security governance

CI/CD integration

Security auditing

Education

Bachelor’s or Master’s degree in CS/IT or related

Tools

Terraform

Kubernetes

AWS IAM

AWS Organizations

EKS

KMS

Job description

Associate Director (Cloud Security Architect)

• Full-time
• Service Region: South Asia

We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at a scale — across all devices and digital mediums, and our people exist everywhere in the world (18500+ experts across 39 countries, to be exact). Our work culture is dynamic and non-hierarchical. We are looking for great new colleagues. That is where you come in!

Requirements

• Experience : 13+ years
• Extensive experience in AWS cloud security engineering, cloud security architecture, and securing large-scale production AWS environments.
• Expert knowledge of AWS Organizations, multi-account architectures, landing zones, and Service Control Policies (SCPs).
• Strong expertise in AWS IAM, least-privilege access, role-based access controls, identity federation, and privilege management.
• Hands-on experience designing and implementing AWS cloud security controls, including VPC security, network segmentation, private connectivity, and workload isolation.
• Strong experience securing Amazon EKS, Kubernetes clusters, containers, and cloud-native workloads.
• Proven expertise in Terraform and Infrastructure-as-Code (IaC) security, including policy enforcement, automated guardrails, and secure infrastructure provisioning.
• Strong understanding of Policy-as-Code practices and integrating security checks into CI/CD pipelines and DevSecOps workflows.
• Experience with AWS data protection capabilities, including encryption, AWS KMS, secrets management, key lifecycle management, and credential rotation.
• Knowledge of AWS-native security services for cloud security posture management, threat detection, logging, monitoring, and security incident investigation.
• Experience identifying and remediating cloud security misconfigurations, vulnerabilities, excessive permissions, and high-risk exposures.
• Understanding of cloud resilience, disaster recovery architecture, and security requirements for business-critical workloads.
• Experience supporting security audits, compliance assessments, risk remediation, and client security assurance activities.
• Ability to develop reusable security reference architectures, technical standards, remediation roadmaps, and measurable security controls.
• Strong technical leadership, analytical, troubleshooting, and cross-functional collaboration skills.
• Excellent communication skills, with the ability to work effectively with cloud engineering, DevOps, platform engineering, enterprise security, and compliance stakeholders.

Responsibilities

• Design, implement, and maintain AWS cloud security architecture across large-scale production environments, ensuring secure, scalable, and compliant cloud operations.
• Define and maintain secure multi-account AWS environments, including landing zones, AWS Organizations, and Service Control Policies (SCPs).
• Implement least-privilege access controls using AWS Identity and Access Management (IAM), supporting effective cloud identity and privilege management.
• Design and enforce secure VPC networking, network segmentation, ingress and egress controls, private connectivity, and workload isolation.
• Establish and maintain security baselines for Amazon EKS, Kubernetes clusters, container images, and associated workloads.
• Implement Infrastructure-as-Code (IaC) and Policy-as-Code security guardrails using Terraform or equivalent tools.
• Identify, assess, prioritize, and remediate cloud misconfigurations, security posture findings, vulnerabilities, and high-risk exposures.
• Define and implement data protection controls, including encryption at rest and in transit, AWS Key Management Service (KMS), secrets management, key lifecycle management, and credential rotation.
• Strengthen cloud logging, monitoring, threat detection, and security telemetry using AWS-native security services and automated monitoring capabilities.
• Integrate security controls into CI/CD pipelines, infrastructure provisioning workflows, and deployment processes in collaboration with DevOps and platform engineering teams.
• Develop reusable, auditable, and developer-friendly security controls, reference architectures, and standardized cloud security patterns.
• Support cloud resilience and disaster recovery initiatives, including recovery architecture design and validation for critical workloads.
• Provide technical evidence, remediation guidance, and security documentation for audits, compliance assessments, and client assurance requirements.
• Develop cloud security remediation roadmaps, operational metrics, and continuous improvement initiatives to strengthen the organization's overall cloud security posture.
• Collaborate with cloud engineering, enterprise security, platform engineering, DevOps, and compliance teams to ensure consistent implementation of security standards.

Bachelor’s or master’s degree in computer science, Information Technology, or a related field.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply