Cloud Security Engineer

HighRadius

Hyderabad, Telangana, IndiaPosted 2 months ago

Skill Required

Product & EngineeringCloud EngineerSecurity EngineerCloud SecurityBackup and RecoverySOCVaultKubernetesTerraformFirewallAnsibleLinuxOAuthAzureDesign PatternsVPNIAMAWSGCPCryptographyDNS

Key highlights

5‑7 years of experience required
Hands‑on experience with Terraform and Ansible
Expertise in HashiCorp Vault, Azure Key Vault, and AWS KMS

Role overview

The Cloud Security Engineer will support Identity and Access Management (IAM) operations, cloud key management, secrets management, and security automation across multi‑cloud environments (Azure, AWS, GCP). They will implement security controls, manage network security, administer Fortigate firewalls, ensure identity governance, and drive automation through IaC and compliance reporting.

Responsibilities

Execute IAM operations including provisioning, access troubleshooting, RBAC/ABAC configurations, and access recertifications.
Manage and implement AWS Service Control Policies (SCPs) to enforce governance and guardrails.
Build and manage Azure Policies (definitions, initiatives, assignments) to meet compliance regulations.
Support IAM architecture across Azure AD/Entra ID, AWS IAM, GCP IAM, and the enterprise Identity Center.
Assist with IAM incident response and Level 2 escalations.
Operate cloud KMS platforms such as Azure Key Vault and AWS KMS, focusing on key rotation, key policies, and certificates/PKI operations.
Enforce cryptographic standards (RSA, AES, ECC), manage TLS certificate lifecycles, and ensure secure key access patterns.
Implement cloud security baselines, guardrails, and compliance controls aligned with CIS, NIST, and ISO27001 standards.
Support network and security posture configuration using tools such as Wiz and Prisma.
Configure and troubleshoot cloud‑native firewalls, Network Security Groups, routing, and segmentation.
Manage, monitor, and troubleshoot Fortigate firewalls, including security policies, NAT, VPN (IPsec/SSL), and routing.
Oversee IPS/IDS configurations and threat profiles.
Ensure high‑availability operations (Active/Passive).
Support network segmentation, micro‑segmentation, and Zero Trust enforcement.
Participate in firewall rule reviews, change management, and impact assessments.
Analyze traffic flows, logs, and events using FortiAnalyzer tools.
Develop Terraform modules for IAM, KMS, vault, firewall policies, and cloud security controls.
Create Ansible playbooks to automate secret rollout, certificate deployments, firewall configurations, and configuration baselines.
Support Kubernetes environments focusing on secret management, RBAC, service accounts, workload identity, and Vault injector integration.
Maintain Standard Operating Procedures (SOPs), runbooks, architecture diagrams, and compliance documentation.
Support internal audits, security reviews, and posture reporting.

Requirements

Hands‑on experience with Terraform and Ansible.
5‑7 years of relevant experience.
Strong understanding of identity protocols including SAML, OAuth2, OIDC, LDAP, and Kerberos.
Experience with Azure AD/Entra ID, AWS IAM, and GCP IAM.
Expertise in HashiCorp Vault, Azure Key Vault, and AWS KMS.
Proficiency in Kubernetes RBAC, secrets management, and workload identity management.
Solid understanding of PKI, TLS certificates, and cryptographic primitives.
Strong Linux administration skills (RHEL/CentOS/Rocky Linux).
Familiarity with Fortigate firewall technologies (firewall/NAT/VPN/IPS/URL filtering) and cloud security controls across Azure, AWS, and GCP.