Senior Cloud Security DevOps Consultant

EY; Bengaluru; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

EY in Bengaluru is seeking a Cyber Security Engineer to design, implement, and maintain hardened VM images in AWS and Azure environments. The role emphasizes CI/CD integration, scripting in Python/PowerShell/Bash, and automation across image creation, validation, testing, and deployment.

The ideal candidate will have experience with CIS Benchmarks (L1/L2), OS hardening, automated remediation, and patch management for Linux and Windows platforms.

Qualifications

• : Minimum of 5 years of IT experience.
• :

Responsibilities

• Developing and maintaining secure VM images through automation and scripting.
• Implementing CI/CD pipelines for efficient deployment and management of images.
• Design and implement end to end automation workflows for image creation, validation, testing, and deployment.
• Create and maintain detailed documentation (runbooks, hardening guides, architecture diagrams).
• Conducting OS hardening for RHEL, Rocky, OEL, Amazon Linux, Ubuntu, and Windows (2016/2019/2022).
• Build and manage automated patching mechanisms for Linux and Windows images.
• Apply CIS L1/L2 frameworks to identify and remediate vulnerabilities using automated mechanisms.
• Collaborate with cloud infrastructure, architecture, and security teams to align hardened images with enterprise requirements.

Skills

Python

PowerShell

Bash

Tools

Azure DevOps

Ansible

Terraform

Packer

Job description

Job Summary

• Cyber Security Engineer We are seeking a skilled Cyber Security Engineer to join our dynamic team responsible for the creation and maintenance of hardened VM images in AWS and Azure environments.
• The ideal candidate will have a strong background in CI/CD pipeline deployment and coding, with proficiency in scripting languages such as Python, PowerShell and Bash.
• Experience with Azure DevOps, Ansible, Terraform, and Packer is essential.
• The role requires deep knowledge of CIS Benchmarks (L1/L2), OS hardening, and automated security remediation.
• The candidate should demonstrate strong problem-solving skills, effective communication abilities, and a proactive approach to security challenges.
• A commitment to continuous learning and staying updated with emerging threats, tools, and technologies is highly valued.

Key responsibilities

• Developing and maintaining secure VM images through automation and scripting.
• Implementing CI/CD pipelines for efficient deployment and management of images.
• Design and implement end to end automation workflows for image creation, validation, testing, and deployment.
• Create and maintain detailed documentation (runbooks, hardening guides, architecture diagrams).
• Conducting OS hardening for various operating systems, including RHEL, Rocky, OEL, Amazon Linux, Ubuntu, and Windows (2016/2019/2022). Debugging code and troubleshooting pipeline errors, OS issues, and service deployments.
• Build and manage automated patching mechanisms for Linux and Windows images.
• Applying in-depth knowledge of CIS L1/L2 frameworks to identify and remediate vulnerabilities using automated mechanisms.
• Track updates in CIS benchmarks and ensure continuous alignment with best practices.
• Support audits and compliance reviews by providing evidence, reports, and remediation strategies.
• Enhance pipelines with security validation, including vulnerability scanning, compliance checks, and integrity verification.
• Conduct peer reviews for scripts, automation logic, and IaC templates to ensure quality and consistency.
• Collaborate with cloud infrastructure, architecture, and security teams to align hardened images with enterprise requirements.
• Providing excellent customer service by communicating effectively with clients about team initiatives and project progress.
• The successful candidate will possess strong problem-solving skills, a proactive approach to security challenges, and the ability to work collaboratively in a fast-paced environment.
• A commitment to continuous learning and staying updated on the latest security trends and technologies is highly valued.

Required

• Minimum of 5 years of IT experience
• At least 3+ years of specialization in Image hardening.
• At least 2+ years of application development in python.
• At least 2+ Experience with programming languages such as Terraform.
• 3-5 years of experience in managing and securing multi-cloud environments (AWS, Azure, GCP) with native security tools.