Cloud Security Subject Matter Expert (SME)

Work Location - Thane

Role Summary

We are seeking a highly skilled Cloud Security SME to lead and strengthen security across our multi-cloud setting (AWS, Azure, OCI, GCP). The role involves designing, implementing, and governing cloud security controls aligned with industry standards, ensuring secure cloud adoption, continuous monitoring, and compliance readiness.

Key Responsibilities

Cloud Security Architecture & Governance
Design and implement secure cloud architecture frameworks across AWS, Azure, and GCP.
Define and enforce cloud security policies, standards, and baselines aligned with ISO 27001, NIST CSF, CIS Benchmarks, and Zero Trust principles.
Establish secure landing zones and guardrails for multi-cloud deployments.
Track Cloud Security Score and enhance Cloud Security Posture.

Risk Management & Compliance
Conduct cloud risk assessments, threat modeling, and gap analysis.
Ensure compliance with regulatory frameworks (DPDP, GDPR, ISO 27001, SOC 2).
Support internal/external audits with evidence,



controls mapping, and remediation tracking.

Identity & Access Management (IAM)
Implement and manage identity security controls (RBAC, ABAC, least privilege, MFA).
Integrate enterprise IAM solutions (e.g., Azure AD, Okta, AWS IAM).
Monitor privileged access and enforce Zero Trust access models.

Cloud Security Controls Implementation
Configure and manage:
Cloud-native security tools (AWS Security Hub, Azure Defender, GCP Security Command Center)
CASB / SASE solutions (e.g., Netskope, Zscaler)
Cloud WAF, API security, network segmentation
Implement data protection controls including encryption (at rest/in transit), DLP, tokenization.

Vulnerability & Configuration Management
Conduct cloud vulnerability assessments & misconfiguration reviews.
Ensure remediation of findings aligned with CIS benchmarks and cloud best practices.

Required Qualifications
Education: B.E / B.Tech in Co

📌 Cloud Security Analyst/engineer Thane
🏢 Astra Cybertech
📍 Thane