Cloud Security Engineer (AWS & Azure)

TeamLease Digital Global; Singapore; On-site; SGD 100,000 - 170,000; Full time

Job summary

TeamLease Digital is seeking experienced Cloud Security Engineers to secure cloud infrastructure across AWS and Azure. You will conduct security assessments, implement controls, and strengthen governance in cloud environments.

Experience in public sector or regulated cloud environments is a plus; role involves CI/CD integration, risk assessments, and vulnerability remediation. Requires strong scripting and IaC skills.

Qualifications

• Minimum 4 years of experience in cloud security engineering, cloud security assessments and remediation.
• Working knowledge of AWS and Azure cloud platforms.
• Understanding of secure cloud architecture, cloud governance, account and subscription segregation, and security baselines.
• Knowledge of cloud identity and access management, network security, encryption, vulnerability management and security monitoring.
• Familiarity with cloud security automation, Infrastructure as Code and DevSecOps practices.

Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments across AWS and Azure environments.
• Design, implement and maintain secure cloud architectures, landing zones, security guardrails and baseline configurations.
• Harden cloud infrastructure, virtual machines, containers and platform components in line with security standards.
• Develop scripts and Infrastructure as Code to automate security hardening, compliance checks and remediation.
• Implement identity and access management controls, least-privilege access, federation, secrets management and encryption.
• Configure and maintain cloud security controls, including firewalls, WAF, network segmentation and DDoS protection.
• Manage cloud security monitoring, logging, alerting and support for threat detection and incident response.
• Integrate security controls into CI/CD pipelines in collaboration with Cloud, DevOps and Application teams.
• Perform vulnerability assessments, configuration reviews and remediation tracking.
• Ensure compliance with security policies, data residency requirements and cloud governance standards.
• Collaborate with Engineering and Operations teams to resolve security findings and improve the overall cloud security posture.
• Support DevSecOps and Cloud Platform Security engineering activities when required.

Skills

AWS

Azure

Cloud security

IAM

Security monitoring

Vulnerability mgmt

DevSecOps

IaC

CI/CD security

Zero Trust

Education

Degree in Computer Science/Engineering/IT

AWS Certified Security - Specialty

AWS Solutions Architect

Azure Security Engineer Associate (AZ-500)

CCSP

CISSP

CISM

CEH/OSCP/GWAPT

Tools

Terraform

CloudFormation

Bicep

ARM templates

Kubernetes

Jenkins

GitLab

Azure DevOps

Job description

Company: TeamLease Digital

Experience: Minimum 4 years

About the Role

TeamLease Digital is looking for experienced Cloud Security Engineers with strong expertise in AWS and Azure cloud security. The successful candidates will be responsible for securing cloud infrastructure, conducting security assessments, implementing cloud security controls, and strengthening security governance across cloud environments.

Experience supporting government, public sector or regulated cloud environments will be an added advantage.

Key Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments across AWS and Azure environments.
• Design, implement and maintain secure cloud architectures, landing zones, security guardrails and baseline configurations.
• Harden cloud infrastructure, virtual machines, containers and platform components in line with security standards.
• Develop scripts and Infrastructure as Code to automate security hardening, compliance checks and remediation.
• Implement identity and access management controls, least-privilege access, federation, secrets management and encryption.
• Configure and maintain cloud security controls, including firewalls, WAF, network segmentation and DDoS protection.
• Manage cloud security monitoring, logging, alerting and support for threat detection and incident response.
• Integrate security controls into CI/CD pipelines in collaboration with Cloud, DevOps and Application teams.
• Perform vulnerability assessments, configuration reviews and remediation tracking.
• Ensure compliance with security policies, data residency requirements and cloud governance standards.
• Collaborate with Engineering and Operations teams to resolve security findings and improve the overall cloud security posture.
• Support DevSecOps and Cloud Platform Security engineering activities when required.

Required Experience and Skills

• Minimum 4 years of experience in cloud security engineering, cloud security assessments and remediation.
• Working knowledge of AWS and Azure cloud platforms.
• Understanding of secure cloud architecture, cloud governance, account and subscription segregation, and security baselines.
• Knowledge of cloud identity and access management, network security, encryption, vulnerability management and security monitoring.
• Familiarity with cloud security automation, Infrastructure as Code and DevSecOps practices.

Preferred Technical Skills

• AWS Security: IAM, AWS Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector and WAF.
• Infrastructure as Code: Terraform, CloudFormation, Bicep or ARM templates.
• CI/CD: GitLab, Azure DevOps, GitHub Actions, Jenkins or equivalent tools.
• Cloud Security Platforms: Wiz, Prisma Cloud, Lacework, Orca or equivalent CSPM, CWPP or CNAPP solutions.
• Container Security: Kubernetes, AKS, EKS, image scanning, runtime protection and secrets management.
• Security Practices: IAM, PAM, Zero Trust, PKI, SIEM/SOAR, incident response, SAST, DAST and SCA.
• Compliance: CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable public sector regulatory requirements.

Education and Certifications

A degree or diploma in Computer Science, Engineering, Information Technology or a related discipline is required.

Relevant certifications are an advantage, including AWS Certified Security - Specialty, AWS Solutions Architect, Microsoft Azure Security Engineer Associate (AZ-500), CCSP, CCSK, CISSP or CISM.

Security testing certifications such as CEH, OSCP, GPEN or GWAPT are also beneficial.