08 Sep
|
Promaynov Advisory Services
|
Hyderabad
08 Sep
Promaynov Advisory Services
Hyderabad
Engineering supports the firm by delivering modern platform capabilities, observability
Responsibilities
- Provide deep technical leadership in cloud security, guiding implementation of complex controls across identity, network, compute, and data layers.
- Lead service onboarding for mission‑critical workloads, defining secure patterns and telemetry requirements.
- Review and approve core platform security changes and IaC module updates.
- Shape platform‑wide security strategy and lead adoption of security policies, standards, and governance controls.
- Own lifecycle management of cloud security policies, guardrails, and compliance measures.
- Drive access governance initiatives, privileged access review cycles, and enforcement of minimum‑privilege models.
- Architect scalable and automated security solutions including network perimeter protections, workload identity models, encryption strategies, and secrets management.
- Evaluate and design controls for multi‑environment and multi‑tenant scenarios.
- Lead integration of enterprise‑grade DevSecOps capabilities across CI/CD pipelines including attestation, SBOM, dependency scanning, SAST/DAST, and image hardening.
- Govern release gates, pipeline approvals, and policy‑as‑code implementations.
- Partner with security operations to enhance detection coverage, automated playbooks, and threat intelligence pipelines.
- Act as a senior responder during incidents—guiding containment, analysis, and remediation activities.
- Influence engineering, SRE, platform, and product teams to adopt secure engineering practices.
- Represent the Platform Security function in design assessments, architecture councils, and leadership forums.
- Provide deep technical insights to stakeholders in clear, concise language.
- Work in rotational shifts as required.
- Participate in on‑call rotations to respond to and resolve high‑severity incidents in a timely manner.
Requirements
- Deep expertise in cloud security architecture, IAM governance, network security, encryption, and policy‑as‑code.
- Strong leadership capabilities — able to influence, mentor, and enable multiple engineering teams.
- Demonstrated experience designing and implementing enterprise‑scale security controls.
- Robust grasp of DevSecOps, secure SDLC, CI/CD pipeline security, code signing, and reproducible builds.
- Experienced in threat detection, incident response, and cloud forensics.
- Extensive knowledge of CI/CD pipelining skills using Azure DevOps or equivalent
- Experience of working in an Enterprise environment.
- Works independently, makes strong technical decisions, and drives engineering excellence across teams.
📌 Azure Cloud Platform Engineering AM (Hyderabad)
🏢 Promaynov Advisory Services
📍 Hyderabad