Devops Cloud Security Engineer

Tata Consultancy Services; Louisville (KY); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Annual Incentive

Medical Coverage

Parental Leave

Insurance Options

Commuter Benefits

Training Reimbursement

Vacation & Holidays

401K

Job summary

Tata Consultancy Services in the United States is seeking an experienced Cloud Security Engineer to design, implement, and manage cloud network security controls in GCP. The role focuses on Infrastructure-as-Code delivery using Terraform, integrated into Azure DevOps Pipelines and GitHub Actions.

You will build secure automated solutions, document runbooks, and transfer knowledge to operational teams while balancing planned work with rapid incident response in a dynamic, fast-paced environment.

Qualifications

• 5+ years of hands-on experience as a Cloud Engineer or Cloud Security Engineer.
• 3+ years of hands-on experience with GCP network security services (VPC-SC, Cloud Armor, NGFW with IPS/IDS).
• Strong Terraform expertise (reusable modules, state management, enterprise workflows).
• Proficiency with CI/CD tools: Azure DevOps Pipelines and GitHub Actions.

Responsibilities

• Design, implement, and manage cloud-native network security controls in GCP (VPC-SC, Cloud Armor, NGFW).
• Develop, maintain, and scale Terraform-based IaC modules for cloud infra and security policies.
• Build, enhance, and manage CI/CD automation using Azure DevOps Pipelines and GitHub Actions.
• Document runbooks and provide knowledge transfers to operational and engineering teams.
• Collaborate across cloud, security, and development teams to ensure secure, scalable solutions.
• Participate in agile ceremonies and provide rapid incident response during security events.

Skills

Scripting (PowerShell, Bash, Python)

Incident response

Documentation & knowledge transfer

Agile methodologies

Cross-functional collaboration

Education

Bachelor of Computer Science

Tools

Terraform

Azure DevOps Pipelines

GitHub Actions

GCP security services

NGFW IPS/IDS

VPC Service Controls

Cloud Armor

Zscaler Cloud Connector

Job description

Description

We are seeking an experienced Cloud Security Engineer to design, implement, and manage cloud network security controls in GCP. The role focuses on Infrastructure-as-Code (IaC) delivery using Terraform, integrated into Azure DevOps Pipelines and GitHub Actions.

Job Description

Must Have Technical/Functional Skills

We are seeking an experienced Cloud Security Engineer to design, implement, and manage cloud network security controls in GCP. The role focuses on Infrastructure-as-Code (IaC) delivery using Terraform, integrated into Azure DevOps Pipelines and GitHub Actions.

The ideal candidate is a subject matter expert (SME) who can build secure, automated solutions from the ground up using Terraform, while documenting and transferring knowledge to internal teams. This role requires the ability to balance planned project execution within agile methodologies with rapid incident response (P0–P3) in a dynamic, fast-paced environment.

Responsibilities

• Design, implement, and manage cloud-native network security controls in GCP, including:
• GCP VPC Service Controls (VPC-SC)
• GCP Cloud Armor (DDoS/WAF protection)
• GCP Cloud Next-Gen Firewall (NGFW Enterprise) with IPS/IDS
• Zscaler Cloud Connector
• Develop, maintain, and scale Terraform-based Infrastructure-as-Code modules for cloud infrastructure and security policies.
• Build, enhance, and manage CI/CD automation using Azure DevOps Pipelines and GitHub Actions.
• Author clear documentation, runbooks, and deliver knowledge transfers and training to operational and engineering teams.
• Collaborate cross-functionally with cloud, security, and development teams to ensure secure, scalable solutions.
• Participate in agile ceremonies for planned project work and provide rapid incident response during P0–P3 security/networking events.

Required Qualifications

• U.S. citizenship is required (by birth or naturalization); Green Card holders are not eligible.
• Work must be performed within the United States (onshore only; no offshore work permitted).
• 5+ years of hands-on experience as a Cloud Engineer or Cloud Security Engineer.
• 3+ years of hands-on experience with GCP network security services, including VPC Service Controls (VPC-SC), Cloud Armor, and NGFW with IPS/IDS.
• Strong expertise in Terraform (designing reusable modules, managing state, enterprise workflows).
• Proficiency in CI/CD tools: Azure DevOps Pipelines and GitHub Actions.
• Scripting proficiency (PowerShell, Bash, or Python) for automation and troubleshooting.
• Demonstrated experience documenting technical solutions, producing clear runbooks, and performing knowledge transfers to enable operational adoption.
• Strong troubleshooting and incident response skills in cloud environments.

Preferred Qualifications

• Experience integrating AI/ML and agentic platforms (e.g., Anthropic Claude or sim ilar) into DevOps pipelines to automate processes, improve operational efficiency, and accelerate delivery timelines.
• Experience with additional CI/CD platforms (e.g., GitLab CI, Jenkins, CircleCI) and configuration management tools (e.g., Ansible).
• Relevant certifications:
• Cloud Security / Architecture: Google Professional Cloud Security Engineer or Google Professional Cloud Architect
• IaC / DevOps: HashiCorp Certified: Terraform Associate or Azure DevOps Engineer Expert

Salary Range $90,000-$130,000 years

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Qualifications:

BACHELOR OF COMPUTER SCIENCE