Responsibilities

• Design, implement, and maintain secure, scalable, and compliant cloud environments across AWS, Azure, or GCP.
• Develop and enforce security policies, standards, and best practices for cloud deployments.
• Implement automation using IaC to embed security controls and improve deployment efficiency and compliance.
• Configure and manage identity, access, and encryption policies to safeguard sensitive data.
• Monitor cloud environments for threats using native and third-party security tools; respond to incidents and perform root cause analysis.
• Collaborate with architecture, development, and DevOps teams to integrate security into CI/CD pipelines and application lifecycle.
• Conduct regular security assessments, vulnerability scans, and risk analysis for cloud workloads.
• Document security architecture, incident response procedures, and compliance reports.
• Continuously research emerging cloud security threats and recommend improvements for posture and resilience.

Requirements

• Diploma/Degree in IT related fields 
• At least 4-5 years of relevant working experiences 
• Experience with container security and orchestration platforms (e.g., Kubernetes security hardening).
• Knowledge of DevSecOps practices and integrating security into CI/CD pipelines.
• Familiarity with compliance frameworks and cloud security benchmarks (CIS).
• Ability to implement cloud-native threat detection and response solutions.
• Exposure to vulnerability management and remediation in cloud environments.
• Basic scripting skills in Python, Bash, or PowerShell for security automation.
• Strong troubleshooting skills and ability to work in cross-functional teams.
• Experience with disaster recovery and secure backup strategies.

• Strong hands-on experience with cloud platforms such as AWS, Azure, or GCP, including secure setup, configuration, and administration of compute, storage, and networking resources.
• Proficient in implementing security controls and automation using Infrastructure as Code (IaC) tools such as Terraform, ensuring compliance and secure deployments.
• Solid understanding of cloud security principles, identity and access management (IAM), encryption, network security (VPC, subnets, VPN), and monitoring tools (e.g., AWS GuardDuty, Security Hub, Inspector) to protect workloads and data