Principal Security Engineer, Cloud and Infrastructure Security
New
J
JobgetherCloud security
Remote working opportunity based in India.Full-TimePrincipal
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years of experience in security engineering or infrastructure engineering, including substantial experience in cloud architecture
- Required Skills
- AWSAzure
Requirements
- Have 10+ years of experience in security engineering or infrastructure engineering, including substantial cloud architecture experience; equivalent depth of experience is considered.
- Bring hands-on cloud security architecture experience across Azure and AWS, with deep expertise in at least one and strong working knowledge of the other.
- Have recent hands-on experience securing AI workloads or AI-enabled security or development tooling, preferably within the last six months.
- Demonstrate experience building security solutions, frameworks, or engineering capabilities adopted and sustained by development or infrastructure teams.
- Have strong infrastructure-as-code experience and the ability to improve engineering practices through secure modules, reusable patterns, and automation.
- Understand cloud network security, including segmentation, private connectivity, egress controls, east-west traffic, and workload isolation.
- Have experience with container and Kubernetes security, image hardening, software supply-chain integrity, and secrets management.
- Know policy-as-code frameworks and how to place security enforcement throughout the software lifecycle.
- Have designed security controls that supported formal audits or compliance requirements.
- Understand infrastructure vulnerability management, cloud security posture management, workload protection, and remediation processes.
- Have security automation experience and sound judgment about autonomous workflows versus human approval.
- Balance technical risk, business priorities, regulatory requirements, and engineering constraints.
- Have strong communication and collaboration skills to influence senior engineers, architects, and cross-functional stakeholders.
- Experience with customer-deployed software, FedRAMP or IRAP environments, large-scale cloud migrations, or infrastructure transformations is advantageous.
- Experience with ISO 27001, SOC 2, PCI, or similar frameworks is beneficial; a bachelor's degree in a related technical discipline is preferred.
Responsibilities
- Own and evolve cloud security architecture across Azure and AWS, including network segmentation, private connectivity, traffic controls, egress policies, and workload isolation.
- Assess infrastructure and product environments against security, regulatory, and certification requirements and identify architectural risks.
- Establish secure-by-default infrastructure patterns, hardened modules, cloud landing zones, account baselines, and reusable infrastructure-as-code controls.
- Extend policy-as-code through development and deployment pipelines to enable earlier security feedback and enforcement.
- Own hardened virtual machine and container image pipelines, including construction, patching, provenance, signing, lifecycle automation, and maintenance.
- Define secure architectures and defaults for Kubernetes and customer-inherited deployment configurations.
- Establish security architecture for AI workloads and AI-enabled development tooling, covering exposure, data boundaries, identities, secrets, and guardrails.
- Lead infrastructure vulnerability and exposure management from discovery and prioritization through remediation and verification.
- Build automated remediation workflows and design controls that generate compliance evidence through queries and automation.
- Partner with engineering teams on architectural decisions and establish infrastructure security standards.
View Full Description & ApplyYou'll be redirected to the employer's site
