Position: Senior Systems Engineer

Experience: 8+ Years

Category: IT Infrastructure

Main location: Bangalore/Chennai

Position ID: J0726-2590

Employment Type: Full Time

Job Summary

We are seeking a Cloud Security Engineer with a strong focus on AWS security governance and guardrails enforcement. This role emphasizes policy driven security, risk identification, and automated enforcement across complex enterprise environments using policy as code and IaC frameworks.

Key Responsibilities

. Design and enforce AWS security guardrails using SCPs, IAM policies, AWS Config, and Security Hub

. Implement preventive and detective controls aligned with enterprise security standards

. Enforce Zero Trust and least privilege principles across cloud workloads

. Perform continuous risk assessments to identify misconfigurations, access risks, and security gaps, and drive remediation

. Develop and manage security policies as code using JSON/YAML based frameworks

. Enforce controls consistently through AWS policies, Config rules, Terraform modules, and ARM templates

. Maintain version controlled, reusable policy frameworks for scalable governance

. Enable continuous compliance monitoring, drift detection, and automated remediation

. Utilize Cortex (Prisma Cloud) / Wiz for cloud security posture management, threat detection, and risk prioritization

. Translate risk findings into actionable guardrails and enforceable controls

. Improve overall security coverage across cloud assets using a risk based approach

. Build secure by default Terraform modules for AWS environments

. Use Python and scripting to automate security enforcement, compliance validation, and remediation workflows

. Integrate security into CI/CD pipelines (GitHub Actions) to enable shift left enforcement

. Drive an automation first approach to support agile,



consistent security enforcement at enterprise scale

. Support governance in Azure using Azure Policies and ARM templates as needed

Skills Required

Solid AWS security expertise (IAM, SCPs, Config, Security Hub).Experience with policy as code and automated security enforcement.Hands on with Terraform, ARM templates, and JSON based policies.Familiarity with Cortex / Wiz (CNAPP tools).Proficiency in Python / scripting and CI/CD (GitHub Actions).Solid understanding of risk assessment, Zero Trust, and compliance frameworks.

Nice to Have

Azure security exposureAWS Security Specialty certification

This keeps it tight, security led, and enterprise focused, while clearly emphasizing: Guardrails & enforcement Policy as code (JSON/Terraform/ARM) CNAPP (Cortex/Wiz) + risk based approach Automation for large scale environments

Preferred Qualifications

We are looking for a Cloud Security Engineer with strong development and automation skills. The ideal candidate should have:

. Hands on experience with Azure and AWS services to perform risk assessments and implement security guardrails.

. Ability to develop and enforce security policies using CSPM/CNAPP

. Strong Infrastructure as Code skills with Terraform and ARM templates for secure deployments.

. Proficiency in PowerShell scripting

. Knowledge of Zero Trust principles, least privilege access, and integration of security controls into CI/CD pipelines.

Skills:

- Cloud Security Audit
- Identity and access mgt (IAM)
- Risk management
- Security assessment
- Terraform

What you can expect from us: That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

📌 Cyber Security Consultant - CSRO (Bengaluru)
🏢 CGI
📍 Bengaluru