Role Purpose

Secure enterprise cloud environments on at least one platform: Azure, AWS or GCP. The candidate should combine cloud-security engineering or architecture with IAM/PAM, Zero Trust, governance, compliance and DevSecOps. Practical AI/ML or GenAI exposure is mandatory.

Key Responsibilities

- Design and implement security controls in Azure, AWS or GCP.

- Secure cloud identity, privileged access, networks, workloads, data, keys, secrets and logging.

- Implement IAM/PAM, least privilege, conditional access and Zero Trust patterns.

- Establish cloud governance, policies, guardrails and compliance evidence.

- Integrate cloud security into CI/CD and Infrastructure as Code workflows.

- Use CSPM, CNAPP, SIEM or native cloud-security services to detect and remediate risk.

- Apply AI/ML or GenAI for security posture summarization, alert triage, policy generation, threat detection, remediation guidance or control mapping.

- Evaluate AI output,



restrict sensitive data exposure and maintain approval for high-impact security changes.

Mandatory Skills

- Solid Azure, AWS or GCP security

- IAM and PAM

- Zero Trust

- Cloud governance and compliance

- DevSecOps

- CSPM / CNAPP

- Cloud networking and workload security

- Infrastructure as Code security

- Logging, monitoring and incident integration

Artificial Intelligence / Generative AI / AI-ML

Preferred Tools and Platforms

- Microsoft Defender for Cloud, Entra ID, Sentinel, Azure Policy

- AWS Security Hub, GuardDuty, IAM, CloudTrail, Config, KMS

- Google Security Command Center, Cloud IAM and logging services

- Wiz, Prisma Cloud, Orca or equivalent CNAPP/CSPM

- Terraform, Checkov, tfsec, CI/CD platforms

- CyberArk or cloud privileged-access controls

- Azure OpenAI, Bedrock, Vertex AI or ML services

📌 Cloud Security Architect (Bengaluru)
🏢 Infosys
📍 Bengaluru