Role & responsibilities

- Design and implement secure, scalable cloud architectures across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
- Define cloud security strategies, policies, standards, and best practices aligned with business requirements and industry regulations.
- Implement Identity and Access Management (IAM), Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Zero Trust security principles.
- Secure cloud infrastructure, networks, workloads, containers, APIs, applications, and data through appropriate security controls.
- Conduct cloud security assessments, threat modelling, vulnerability assessments, and architecture reviews to identify and mitigate risks.
- Implement encryption, key management, secrets management, data protection, and secure backup and recovery solutions.
- Integrate security controls into CI/CD pipelines and DevSecOps workflows to enable continuous security validation.
- Monitor cloud environments using SIEM, CSPM, and other security tools to detect threats, investigate incidents, and coordinate remediation.
- Ensure compliance with security frameworks and standards such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and applicable regulatory requirements.
- Collaborate with cloud engineers, DevOps teams, application developers, compliance teams, and business stakeholders to embed security throughout the software development lifecycle.
- Develop cloud security reference architectures, technical documentation, security guidelines, and incident response procedures.
- Evaluate emerging cloud security technologies and recommend improvements to strengthen the organisation's security posture.





Preferred candidate profile

- Bachelor's or master's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.
- 5 to 10 years of experience in cybersecurity, cloud engineering, infrastructure security, or information security, including hands-on cloud security architecture experience.
- Strong expertise in at least one major cloud platform: AWS, Microsoft Azure, or Google Cloud Platform; multi-cloud experience is an advantage.
- In-depth knowledge of IAM, network security, encryption, key management, secrets management, Zero Trust, and cloud-native security services.
- Practical experience with cloud security tools, CSPM solutions, SIEM platforms, vulnerability management, and incident response.
- Proficiency in Infrastructure as Code tools such as Terraform or CloudFormation, scripting languages such as Python or Bash, and DevSecOps practices.
- Understanding of container security, Docker, Kubernetes, API security, and CI/CD pipeline protection.
- Knowledge of security and compliance frameworks such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and relevant data protection requirements.
- Solid skills in threat modelling, risk assessment, security architecture reviews, and security control implementation.
- Excellent analytical, problem-solving, communication, and stakeholder-management skills.
- Ability to translate business and regulatory requirements into practical cloud security solutions.
- Preferred certifications: AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CCSP, or CISSP.

📌 Cloud Security Architect (India)
🏢 Good Co India
📍 India