Job Description:

- Design, implement, and maintain secure Azure cloud architectures aligned with organizational security, governance, and compliance requirements.

- Conduct cloud security assessments, vulnerability assessments, risk analysis, and threat modeling for cloud workloads and applications.

- Define and enforce security controls using Azure Policy, Microsoft Defender for Cloud (formerly Azure Security Center), and Microsoft Sentinel.

- Integrate security controls into CI/CD pipelines and DevSecOps processes using Azure DevOps or GitHub Actions.

- Develop and maintain secure Infrastructure as Code using Terraform, ARM Templates, or Bicep.

- Automate infrastructure provisioning, security remediation, compliance checks, and incident-response workflows using PowerShell, Azure CLI, and/or Python.

- Design and manage Identity and Access Management (IAM) controls using Microsoft Entra ID (formerly Azure Active Directory), including:

- RBAC

- Conditional Access

- MFA

- Privileged Identity Management (PIM)

- Secure and harden Azure infrastructure components, including:

- AKS / Kubernetes

- Virtual Networks and Subnets

- NSGs





- Azure Key Vault

- Azure Firewall

- Storage Accounts

- Load Balancers

- Private Endpoints

- Secure Kubernetes/AKS environments through appropriate network policies, authentication mechanisms, secrets management, and workload security controls.

- Monitor security events, investigate alerts, and support incident response using SIEM solutions, preferably Microsoft Sentinel.

- Develop and maintain security reference architectures, cloud security blueprints, standards, and technical documentation.

- Support cloud migration initiatives by identifying security risks, defining security requirements, and validating secure configurations.

- Collaborate with development and operations teams to promote DevSecOps and secure-by-design practices.

- Provide technical guidance and security awareness/training to engineering and operations teams.

- Stay updated on emerging cloud security threats, vulnerabilities, security technologies, and regulatory requirements.

📌 Cloud Security Engineer (Bengaluru)
🏢 Acme Services Private
📍 Bengaluru