Senior Cloud Security Architect

Claranet India; Jaipur; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Claranet India in Jaipur is seeking a Cloud Security Engineer to work within a dedicated security engineering function. You will design and implement security architectures for cloud-based systems, ensuring compliance with security frameworks and addressing potential security risks.

The ideal candidate should have at least 4 years of Information Security experience with in-depth knowledge of cloud technologies like AWS, Azure, and Google Cloud. Strong communication skills and a Bachelor's degree in Cybersecurity are essential for this role.

Qualifications

• 4+ years of Information Security experience in Cloud Security.
• In-depth knowledge of cloud technologies and associated security risks.
• Good interpersonal and communication skills.

Responsibilities

• Design and implement security architectures for cloud-based systems.
• Perform risk assessments and security assessments.
• Communicate effectively with stakeholders on cloud security.

Skills

Cloud security practices

Threat modelling

Information Security

Public cloud technologies (AWS, Azure, GCP)

Software development processes

Containerization technologies (Docker, Kubernetes)

Education

Bachelor's Degree in Cybersecurity or equivalent

Tools

Infrastructure as Code (IaC) tools

Job description

Essential Roles & Responsibilities

• Work within a dedicated security engineering function that accelerates the delivery of creative and secure capabilities for cloud products.
• Design and implement security architectures for cloud-based systems.
• Build security control framework and generic reference architectures for cloud based applications.
• Assist with identifying security requirements to be followed by LoB/Dev teams when building Cloud applications.
• Perform risk assessment, threat modelling and review existing cloud security architectures to identify potential areas of weakness or need for enhancement.
• Perform security assessments including threat modelling and security integration assessments.
• Ensure that security design and controls are consistent with the organisation's security architecture principals.
• Align cloud security practices with industry frameworks such as NIST, CIS, and CSA.
• Develop configuration hardening guidelines for Cloud Services (AWS, Azure, GCP).
• Provide expertise on encryption, key management, identity and access management (IAM), network security, and other cloud security technologies.
• Communicate effectively with stakeholders to provide regular updates on cloud security status and issues.
• Continuously evaluate the cloud security architecture for improvements and to accommodate changing cloud environments, accommodating for scalability, reliability, and availability.

Total IT Experience: 4-8 years.

Position Specifications

• Bachelor's Degree or industry equivalent work experience in cybersecurity, international security architecture, and/or engineering in a converged security program.
• 4+ years of Information Security experience in areas of Information/Cloud Security.
• In-depth knowledge of public cloud technologies (AWS, Azure, Google Cloud Platform) and associated security risks and controls.
• Demonstrated knowledge of software development processes (SLDC/Agile/Iterative/DevOps).
• Experience delivering security solution architecture from end-to-end.
• Threat modelling using industry standard methodologies (e.g. STRIDE/DREAD).
• Security architecture assessments for one or more IT systems such as Web, Mobile, APIs/Microservices, Cloud (AWS/GCP/Azure/Oracle).
• Experience developing Reference Security Architecture and Design Patterns to support proactive and automated controls.
• Demonstrated knowledge of information security standards, rules and regulations related to information security and data confidentiality and other security standards and policies.
• Ability to keep up to date with technology and security, make informed decisions and appropriate adjustments.
• Good interpersonal and communication skills with the ability to influence at all levels of the organisation, while simplifying complex topics.
• Ability to organise, prioritise, and lead multiple deliverables simultaneously across a large, global corporate environment.
• Familiarity with containerization and orchestration technologies (Docker, Kubernetes, etc.).
• Experience with Infrastructure as Code (IaC) tools.