Security Platform Engineering

Infyshine; Gurugram District; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Infyshine is seeking a Security Platform Engineer with 10+ years of hands-on experience. The role focuses on integrating secrets management and IAM controls across hybrid cloud environments, defining standards, and governing architectures.

You will work across security, cloud, and platform teams to implement scalable security patterns. Key areas include Entra ID, AWS IAM, RBAC/ABAC, workload identity, and governance models, with collaboration across risk and audit teams to ensure compliant,

Qualifications

• 10-15 years hands-on experience across IAM, secrets management, cloud security, and related domains.
• Proven delivery of at least one enterprise transformation in secrets management, IAM, PAM, DevSecOps, or cloud security.
• Strong understanding of IAM concepts including authentication, authorization, RBAC, ABAC, least privilege, federation, workload identity, privileged access, service accounts, access reviews, and audit controls.
• Hands-on experience with Azure and AWS IAM services (Entra ID, Azure Managed Identity, service principals, AWS IAM roles/policies, STS, OIDC).
• Experience with two or more secrets management technologies (Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, CyberArk Conjur, etc.).
• Experience in hybrid cloud/on-prem environments and integrating secrets/IAM with CI/CD tools (Azure DevOps, GitHub Actions, Jenkins, GitLab).
• Ability to define enterprise standards, target-state architecture, migration plans, governance models, and practical engineering patterns.
• Strong stakeholder management across security, cloud, platform, infrastructure, applications, risk, and audit teams.

Responsibilities

• Lead design and governance of enterprise security standards and patterns for secrets and IAM across cloud and on‑prem environments.
• Drive migration plans and governance models to ensure secure, scalable deployments.
• Collaborate with security, cloud, platform, infrastructure, application, risk, and audit teams to implement IAM and secrets controls across CI/CD pipelines.

Skills

IAM concepts

Secrets management

Cloud security

DevSecOps

CI/CD tools

Azure

AWS IAM

RBAC/ABAC

Workload identity

Stakeholder mgmt

Education

B.E./B.Tech or MCA in CS

Job description

We are hiring Security Platform Engineering

Experience: 10+ Years

Location: Gurugram

Job Description:

• B.E./B.Tech. Or M.C.A. in Computer Science from a reputed University with 10-15 years of hands‑on experience on below mentioned skills.
• Proven experience delivering at least one enterprise transformation in secrets management, IAM, PAM, DevSecOps, cloud security, or machine identity.
• Strong understanding of IAM concepts, including authentication, authorization, RBAC, ABAC, least privilege, federation, workload identity, privileged access, service accounts, access reviews, and audit controls.
• Hands‑on experience with Azure and AWS IAM services, including Entra ID, Azure Managed Identity, service principals, AWS IAM roles, policies, STS, and OIDC.
• Experience with at least two secrets management technologies, such as Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, CyberArk Conjur, Akeyless, Thales CipherTrust, External Secrets Operator, or Secrets Store CSI Driver.
• Experience working in hybrid environments with cloud and on‑premises workloads.
• Experience integrating secrets and IAM controls with CI/CD tools such as Azure DevOps, GitHub Actions, Jenkins, GitLab, or similar.
• Ability to define enterprise standards, target‑state architecture, migration plans, governance models, and practical engineering patterns.
• Strong stakeholder management skills across security, cloud, platform, infrastructure, application, risk, and audit teams.