Cloud & Infrastructure Security Engineer - Nexedge Capital

Location: Delhi (HQ) - travel to Mumbai / other Nexedge offices as needed

Function: Technology & AI Initiatives

Reports to: Head of Engineering

Experience: 4 to 7 years

About Nexedge

Nexedge Capital is a SEBI-registered wealth management and investment advisory firm serving HNI and UHNI clients across mutual funds, AIFs, PMS, structured products and family office services. We operate across Delhi, Mumbai, Kolkata, Bengaluru, Chandigarh, Jaipur and Surat, and we are scaling our Cloud footprint quickly.

About the role

We are looking for a hands-on engineer who can run our cloud and network infrastructure securely and also look after day-to-day IT administration. You will be the hands-on owner of our cloud environment: configuring and securing infrastructure, managing identities and endpoints, and handling day-to-day network, access and platform requests from teams across the business.

This is a build-as-you-go role. You will set up the standards, document them, and keep them running. Security governance and ISO 27001 certification are led with external partners; your job is to implement the technical controls and keep the evidence ready.

What you'll do:

Azure infrastructure and network security

- Provision and manage Azure resources (virtual machines, storage including ADLS Gen2, networking) under agreed security standards
- Configure and maintain network security controls, including firewalls, security groups, private connectivity, DNS and IP management
- Manage Key Vault,



managed identities and app registrations; support secure API authentication for internal platforms and integrations
- Design and maintain secure network and data segregation, with role-based access and least-privilege controls

Identity, endpoint and IT administration

- Administer Microsoft Entra ID, Microsoft 365 and Intune MDM for laptops and mobiles
- Handle user onboarding and offboarding, access requests, licence management and helpdesk escalations
- Maintain a single inventory of Azure resources, endpoints, software licences and SaaS subscriptions, with tagging and ownership

Security operations

- Run vulnerability scanning and patch cadence across cloud and endpoint estate
- Monitor alerts, triage incidents and escalate under our incident management process
- Support periodic access reviews and least-privilege enforcement

PostgreSQL security

- Deploy and harden PostgreSQL (Azure Flexible Server) with private networking, TLS, encryption at rest and Entra ID authentication
- Enforce least-privilege roles, auditing (pgaudit, Log Analytics, PAM), backup, restore and patching

DevOps and secure delivery

- Build CI/CD pipelines (Azure DevOps or GitHub Actions) with secret scanning, SAST/SCA and production approvals




- Manage Terraform or Bicep deployments with Azure Policy and Defender for Cloud guardrails
- Partner with AI and data teams to embed security into releases

Compliance support (implementation through vendors, not ownership)

- Work with external ISO 27001 consultants and auditors to implement technical controls and provide evidence
- Contribute to security policies, standards and runbooks, and keep them current
- Support vendor security reviews and data protection requirements for cloud systems
- Help new tools and AI integrations meet security standards before go-live

What we are looking for

- 4 to 7 years in cloud infrastructure or security, with hands-on Azure experience
- Azure networking, firewalls and identity skills beyond portal basics
- Working knowledge of PostgreSQL security, Terraform or Bicep, and CI/CD pipelines
- Exposure to an ISO 27001 or SOC 2 cycle as the engineer implementing controls
- Transparent documentation habits and calm under pressure

Good to have

- AZ-104, AZ-500 or SC-300
- Financial services or other regulated-industry experience
- Microsoft Sentinel; PowerShell or Python
- ISO 27001 Lead Implementer or Lead Auditor

- Why join Nexedge

- Own the infrastructure and security foundation of a growing wealth management firm
- Direct visibility to technology leadership
- Work alongside AI and data teams building new platforms on Azure
- A broad mandate across cloud, identity and security rather than a narrow ticket queue

📌 Cloud & Infrastructure Security Engineer (with IT Administration) (Delhi)
🏢 Nexedge Capital
📍 Delhi