Location: Chennai / Remote (India)
Job Type: Full-Time
Experience: 3–6 Years

About the Role:
We are looking for a Cloud Platform Security Engineer to design and secure scalable, production-grade platforms across cloud, on-prem, and edge environments. This role focuses on Kubernetes security, DevSecOps, Zero Trust architecture, and protecting real-time data pipelines used in IIoT and distributed systems.

You will work closely with platform, DevOps, and application teams to ensure systems are secure by design, continuously monitored, and resilient under real-world conditions.

Key Responsibilities:

- Design and operate secure, scalable Kubernetes platforms across multi-cluster and multi-datacenter environments
- Manage cluster lifecycle (provisioning, upgrades, networking, CNI, ingress, service mesh)
- Build and enforce DevSecOps pipelines with CI/CD, GitOps workflows, and integrated security checks (SAST, DAST, container scanning, dependency analysis)
- Implement policy-as-code using OPA / Kyverno
- Design and implement Zero Trust architecture (micro-segmentation, IAM/RBAC, mTLS, secure API gateways)
- Secure containerized workloads (hardened images, runtime security, vulnerability management, compliance scanning)
- Manage infrastructure-as-code using Terraform / Ansible
- Build observability systems using Prometheus, Grafana, Loki / ELK / OpenSearch, and OpenTelemetry (metrics, logs, tracing)
- Implement incident detection and response (alerting, anomaly detection, runbooks, RCA)
- Manage secrets and key management systems (Vault / SOPS / KMS, key rotation, encryption policies)
- Enforce network security (firewalls, VPNs, load balancers like HAProxy/Nginx, DNS security, ingress/egress control)
- Secure IIoT / SCADA data pipelines (MQTT, Kafka, edge-to-cloud communication, device authentication)
- Design high availability and disaster recovery (multi-region failover, replication, backups, failback)




- Optimize infrastructure for performance, cost, and scalability
- Collaborate with engineering teams to embed security into application and platform design

Required Skills & Qualifications:

- 3–6 years of experience in Cloud Security / DevSecOps / Platform Engineering
- Strong hands-on experience with Kubernetes in production
- Experience with CI/CD pipelines and DevSecOps practices
- Knowledge of container security, vulnerability management, and compliance
- Experience with Infrastructure-as-Code (Terraform / Ansible or similar)
- Understanding of networking, firewalls, VPNs, and cloud security concepts
- Experience with monitoring and observability tools
- Knowledge of IAM, RBAC, and secrets management
- Understanding of Zero Trust security principles

Nice to Have:

- Experience in IIoT / SCADA / industrial systems
- Familiarity with Kafka, MQTT, or real-time streaming systems
- Experience with service mesh (Istio, Linkerd)
- Knowledge of compliance standards (ISO 27001, NIST, etc.)
- Experience with multi-cloud or hybrid cloud environments

What We’re Looking For:

- Strong security-first mindset with practical implementation experience
- Ability to design and secure real-world distributed systems
- Hands-on approach to troubleshooting and automation
- Focus on reliability, scalability, and continuous improvement

Job Types: Full time, Permanent

Pay: ₹8,086.00 - ₹51,085.90 per month

Benefits:

- Health insurance
- Leave encashment
- Paid sick time
- Paid time off
- Provident Fund
- Work from home

Application Question(s):

- Describe a Kubernetes platform you have secured in production
- How have you implemented DevSecOps in CI/CD pipelines?
- What tools have you used for container security and vulnerability scanning?
- How do you manage secrets and access control in your systems?
- Describe an incident you handled related to security or system failure

Work Location: In person

📌 Cloud Platform Security Engineer (Chennai)
🏢 Aara Infosystems Private
📍 Chennai