: Cloud Security Engineer

Reports to: Security Lead

Level: Mid (IC)

Mission

Own the identity, access, and network security control plane — CyberArk, Zscaler and Cloudflare — for a fast-scaling, AI-driven insurance infrastructure org. You'll take these tools from initial deployment handoff to steady, auditable, day-2 operations, and be the technical backbone the Security Lead relies on for privileged access and network security posture.

What you'll own

- CyberArk (PAM) — protected/policy design, privileged account lifecycle, credential rotation monitoring, access recertification
- Zscaler (SSE) — policy tuning, app onboarding, exception handling
- Cloudflare (WAF/CDN, and Zero Trust/Access if applicable) — rule tuning, DNS, edge security posture

Key responsibilities
- Take over day-2 administration of CyberArk from the implementation partner; ensure clean runbooks/SOPs exist and are maintained
- Run privileged access onboarding/offboarding and periodic access recertification, feeding evidence to the GRC Analyst for audit cycles
- Own Zscaler and Cloudflare policy baselines; manage exceptions without degrading security posture
- Partner with engineering teams as headcount scales to keep IAM and network controls usable, not just secure
- Support technical deep-dives requested by auditors or pen testers on identity/network architecture
- Identify opportunities to automate policy-drift detection and routine PAM/SSE administration, in line with the team's AI-driven,



lean operating model
- Escalate control-design questions or audit findings on these tools to the Security Lead

What we're looking for
- 3–6+ years in security engineering, with hands-on ownership of at least one PAM platform (CyberArk strongly preferred) in production
- Working experience with a cloud SSE/ZTNA platform (Zscaler, Cloudflare Access, or similar) and a CDN/WAF
- Comfortable being the sole owner of high-scrutiny controls in an audited environment (SOC 2, ISO 27001, or similar)
- Strong scripting/automation ability (Python, Terraform, or similar) to keep a lean team's operational load sustainable
- Clear written communication — you'll produce evidence and explanations auditors and pen testers can follow

Nice to have
- Insurance, financial services, or other regulated-industry background
- Experience standing up or maturing a PAM program from a fresh implementation
- Exposure to NAIC Insurance Data Security Model Law or similar state insurance regulatory frameworks

How we'll know you're succeeding
- CyberArk, Zscaler, and Cloudflare pass audit control tests with minimal findings
- Privileged access recertification completed on schedule every cycle
- No unplanned production impact from policy changes across owned tools
- Routine administration increasingly automated rather than manual quarter over quarter

Location: Mumbai - UI, Mumbai, Maharashtra, India

📌 Senior Cloud Security Engineer (Mumbai)
🏢 Noventiq
📍 Mumbai