Note: The job is a remote job and is open to candidates in USA. Astreya is seeking an experienced Cloud Security Engineer to architect, deploy, and secure public cloud infrastructure across AWS and multi-cloud environments, including Microsoft Azure. The role focuses on Infrastructure as Code automation, cloud security governance, containerized applications, monitoring, cost optimization, and integrating security into CI/CD pipelines.
Responsibilities
- Cloud Infrastructure Design & Deployment: Architect, design, and deploy cloud solutions across public cloud platforms (primarily AWS) that meet high scalability, performance, and cost-efficiency needs for enterprise applications
- Automation with Infrastructure as Code (IaC): Use tools such as Terraform, AWS CloudFormation, and Ansible to automate the deployment and management of cloud infrastructure, promoting efficiency and consistency across environments
- Continuous Security Posture Management: Implement Kubernetes Security Posture Management (KSPM) and leverage advanced cloud security platforms—including Prisma Cloud, Wiz Platform, Adaptive Shield, Microsoft CASB, Brinqa, and CloudKnox—to enforce policy compliance, manage IAM permissions, detect vulnerabilities, and improve cloud security governance
- Security & Compliance Management: Implement and maintain cloud security controls, including firewalls, Web Application Firewalls (AWS WAF), Network ACLs, Identity and Access Management (IAM), security groups, and encryption mechanisms to ensure data security and regulatory compliance (e.g., SOC 2, GDPR, HIPAA)
- Container Management & Orchestration: Build, deploy, and manage containerized applications using Docker and Kubernetes. Orchestrate services with Amazon EKS and Azure AKS to ensure high availability, secure authentication modes, and resource optimization
- Networking in the Cloud: Set up and manage secure virtual networks, subnets, Transit Gateways, and routing tables (e.g., AWS VPC, Azure VNet), ensuring secure and efficient communication between services, zones, and regions
- Performance Monitoring & Troubleshooting: Monitor the overall health, availability, and security of cloud environments using tools like AWS CloudWatch, CloudTrail, Splunk, Prometheus, and Grafana to troubleshoot and resolve performance issues, latency, or service disruptions
- DevOps & CI/CD Pipeline Integration: Collaborate with development teams to integrate secure CI/CD pipelines using tools like Jenkins, GitHub, and Snyk for vulnerability scanning, ensuring fast, automated, and secure continuous delivery
- Load Balancing & Auto-Scaling: Configure and manage load balancers (e.g., AWS ELB, ALB, Azure Internal Load Balancer) and auto-scaling policies to guarantee application scalability and availability under varying traffic loads
- Cloud Cost Optimization: Continuously monitor and optimize cloud resource usage, implementing cost-saving measures such as auto-scaling policies, scheduled start/stop automation, reserved instances, and workload configuration adjustments
- Documentation & Best Practices: Document all cloud architecture, configurations, and operational processes while promoting best practices for secure cloud deployments aligned with enterprise standards
Skills
- • Education & Experience: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent professional experience)
- • Cloud Platforms: Hands-on experience architecting and securing public cloud platforms, specifically Amazon Web Services (AWS) and Microsoft Azure (IaaS, PaaS, SaaS)
- • Security & Governance Tools: Practical experience using enterprise security posture management tools such as Prisma Cloud, Wiz Platform, Brinqa, CloudKnox, Adaptive Shield, Microsoft CASB, and IBM QRadar
- • IaC & Automation: Demonstrated proficiency with Terraform (including Sentinel policies), AWS CloudFormation, Ansible, and scripting languages (Python, Bash, PowerShell, Groovy)
- • Containers & Orchestration: Strong expertise in containerizing applications with Docker and managing Kubernetes environments (Amazon EKS, Azure AKS, or RedHat OpenShift)
- • Networking & Security Fundamentals: In-depth knowledge of cloud networking concepts (VPC/VNet, Subnets, Transit Gateway, Route Tables, NAT, VPN, WAF, Security Groups) and protocols (TCP/IP, DNS, DHCP, SSL/TLS, LDAP)
- • CI/CD & SCM: Experience building and maintaining CI/CD pipelines using Jenkins, Git/GitHub, Maven, and vulnerability scanners like Snyk
- • Monitoring & Analytics: Familiarity with cloud monitoring, logging, and SIEM tools including AWS CloudWatch, AWS CloudTrail, Splunk, Nagios, Prometheus, and Grafana
- • AWS Certified Solutions Architect – Associate or Professional
- • AWS Certified Security – Specialty
- • Certified Kubernetes Security Specialist (CKS) / Certified Kubernetes Administrator (CKA)
- • Scrum Foundational Professional Certified (SFPC) or Agile methodology certifications
Benefits
- For Regular, Full-Time Employees: Medical provided through UHC (PPO, HSA, Surest options)
- For California employees only: Medical provided through Kaiser (HMO option only)
- Dental provided through UHC
- Nationwide Vision provided by UHC
- Flexible Spending Account for Health & Dependent Care
- Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
- Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
- Corporate Wellness Program provided by Goomi Group
- Employee Assistance Program
- Wellness Days
- 401k Plan
- Basic and Supplemental Life Insurance
- Short Term & Long Term Disability
- Critical Illness, Critical Hospital, and Voluntary Accident Insurance
- Tuition Reimbursement (available 6 months after start date, capped)
- Paid Time Off (accrued and prorated, maximum of 120 hours annually)
- Paid Holidays
- Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law
Company Overview
Company H1B Sponsorship