Designs and governs secure multi-cloud architectures across AWS, Azure, and GCP. Responsibilities include zero-trust landing zones, IAM and RBAC, encryption and key management, container and Kubernetes security, CSPM and CWPP integration, policy-as-code automation, DevSecOps security testing, and incident-response readiness. The role requires extensive enterprise infrastructure security experience, cloud security architecture expertise, infrastructure-as-code knowledge, threat modeling skills, and a mandatory security certification.
This is a remote position.
Cloud Security Architect (AWS / Azure / GCP)
Job Details
- Employment Type: Contract
- Work Mode: Remote
- Location: Offshore
- Total Experience Required: 8 to 12 years
- Relevant Experience Required: 5+ years of dedicated cloud security architecture experience across public cloud infrastructures
- Mandatory Certification: Certified Information Systems Security Professional (CISSP), CCSP, AWS Certified Security - Specialty, or Microsoft Certified: Azure Security Engineer Associate
Job Summary
We are seeking an experienced Cloud Security Architect to design, govern, and secure our enterprise multi-cloud infrastructure. The ideal candidate will establish cloud security blueprints, architect zero-trust landing zones, secure containerized microservices, and build guardrails to automate compliance and protect cloud-native applications from sophisticated threats.
Key Responsibilities
- Design and govern cloud security architectures across public cloud platforms (AWS, Azure, and GCP), establishing foundational multi-tenant landing zones and zero-trust perimeters.
- Configure Identity and Access Management (IAM) strategies, defining least-privilege access rules, role-based controls (RBAC), multi-factor authentication (MFA), and federated identity lifecycles.
- Implement cloud data protection layers, managing end-to-end cryptography, key management services (KMS), hardware security modules (HSM), and data-loss prevention (DLP) rules for data at rest and in transit.
- Secure containerized microservices environments, designing runtime security boundaries, image vulnerability scanning protocols, and network policy controls for Kubernetes (EKS/AKS/GKE).
- Integrate Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP), writing automated policy-as-code scripts to enforce security configuration standards.
- Collaborate with DevSecOps engineering teams to embed automated security testing utilities, static/dynamic application analysis (SAST/DAST), and secret management vaults directly into CI/CD pipelines.
- Lead incident response readiness architecture, designing cloud telemetry dashboards, log aggregation feeds (SIEM), and automated threat hunting triggers to accelerate breach containment.
Requirements
- 8 to 12 years of core enterprise infrastructure security experience, with 5+ dedicated years actively designing, building, and governing multi-cloud safety frameworks.
- Strong technical mastery of cloud networking security components (VPC architecture, firewalls, WAF, DDoS protection), infrastructure-as-code scripting (Terraform, CloudFormation), and threat modeling.
- Deep structural understanding of cloud computing vulnerabilities, container security paradigms, API gateway perimeters, and modern cryptography standards.
- Mandatory certification: CISSP, CCSP, or cloud vendor-specific expert security certification (e.g., AWS Security Specialty / Azure Security Engineer).
Preferred Qualifications
- Prior experience implementing security frameworks within heavily regulated environments (e.g., PCI-DSS, HIPAA, SOC 2, ISO 27001).
- Familiarity with scripting languages (Python, Bash, Go) used to automate security compliance remediation flows.
Similar Jobs
Digital Media • eCommerce • Gaming • Mobile • News + Entertainment
Leads Crunchyroll’s customer experience incident response program, managing analysts and responders, incident detection, escalation, resolution, governance, and post-incident reviews. Partners with Engineering, Product, Analytics, Trust & Safety, and CX Technology to improve reporting, alerting, automation, trend detection, and operational processes. Establishes ITIL-based practices, playbooks, service-level agreements, and performance metrics while translating fan-impacting issues into actionable insights and preventive improvements.
Top Skills:
ItilSalesforce Service CloudSierra
Events • Food • Travel • Hospitality • Hotels & Resorts
Provides executive administrative support to the General Manager, including calendar management, meeting coordination, reports, presentations, and minutes. Manages guest inquiries, feedback, VIP amenities, welcome cards, and event-related details. Monitors guest satisfaction metrics, supports service improvements, maintains office equipment, reports issues through HotSOS, and coordinates communication across hotel departments.
Top Skills:
Hotsos
Events • Food • Travel • Hospitality • Hotels & Resorts
Develops and maintains hotel fire safety plans, emergency response procedures, and regulatory compliance programs. Conducts fire drills, trains staff, assesses hazards, investigates incidents, coordinates with hotel departments and fire authorities, leads emergency evacuations, and oversees fire safety equipment inspections and maintenance.
Top Skills:
Fire Safety EquipmentFire Safety SystemsSafety Management Systems
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
