Note: The job is a remote job and is open to candidates in USA. ISITE TECHNOLOGIES is seeking a Cloud Security Engineer to secure and govern cloud environments across Azure and GCP. The role focuses on designing secure architectures, implementing identity and security controls, managing cloud security posture and vulnerability processes, supporting monitoring and incident response, and automating compliance controls.
Responsibilities
- Design and implement secure cloud architectures across Azure and GCP
- Develop cloud security standards, policies, controls, and governance frameworks
- Implement IAM, RBAC, least-privilege access, MFA, and privileged access management
- Secure Azure services including Azure AD/Entra ID, Azure Key Vault, Defender for Cloud, Azure Firewall, NSG, Sentinel, and Policy
- Secure GCP services including IAM, Cloud KMS, Security Command Center, VPC, Cloud Armor, Organization Policy, and Cloud Logging
- Implement security controls for compute, containers, Kubernetes, APIs, databases, storage, and networking
- Design and implement Zero Trust security principles across cloud environments
- Develop and manage cloud security posture management (CSPM) and vulnerability management processes
- Integrate cloud security monitoring with SIEM/SOAR platforms and support security incident response
- Implement encryption, secrets management, key management, logging, monitoring, and data protection controls
- Conduct cloud security assessments, threat modeling, architecture reviews, and risk assessments
- Ensure cloud environments comply with organizational and regulatory security requirements
- Collaborate with Cloud, DevOps, Infrastructure, Application Security, and SOC teams
- Automate security controls and compliance checks using Terraform, Python, PowerShell, or similar tools
Skills
- • Strong hands-on experience with Azure Cloud Security and GCP Cloud Security
- • Azure Entra ID / Azure AD, RBAC, Azure Policy, Defender for Cloud, Key Vault, Sentinel
- • GCP IAM, Security Command Center, Cloud KMS, VPC, Organization Policy, Cloud Logging
- • Cloud networking and security: VPC/VNet, firewalls, VPN, private endpoints, load balancers, DNS
- • IAM, PAM, Zero Trust, encryption, secrets and key management
- • Experience with CSPM, vulnerability management, SIEM, and cloud security monitoring
- • Knowledge of Kubernetes, Docker, containers, and DevSecOps
- • Infrastructure as Code experience with Terraform
- • Strong understanding of security frameworks such as NIST, CIS, ISO 27001, and SOC 2
- • Microsoft Certified: Azure Security Engineer Associate (AZ-500)
- • Google Professional Cloud Security Engineer
- • CCSP / CISSP
- • Experience with Prisma Cloud, Wiz, Lacework, or similar CSPM/CNAPP platforms
- • Experience with CI/CD security and DevSecOps automation
- • Python, PowerShell, Bash, or other scripting experience
Benefits
- Remote work arrangement
Company Overview
Company H1B Sponsorship