Cloud security engineer

Ümumi məlumat

Bir ecosystem is seeking a highly motivated and detail-oriented Cloud Security Engineer to join the Platform Security Division within the Information Security function.

Öhdəliklər

• Design, monitor, and maintain secure cloud and on-premise infrastructure environments across the ecosystem
• Manage and monitor Linux-based systems and services to ensure high availability, performance, and security
• Implement and maintain cloud security controls across AWS, Azure, and other cloud platforms
• Manage and monitor network security solutions including firewalls, VPNs, routing, segmentation, WAF, and access control policies
• Perform vulnerability assessments, security hardening, patch management, and incident response activities
• Develop and maintain Infrastructure as Code (IaC) and automation solutions using Terraform, Ansible, and scripting languages
• Collaborate with DevOps, Infrastructure, and Development teams to integrate security best practices into CI/CD pipelines and system architecture
• Participate in troubleshooting, root cause analysis, and performance optimization activities related to infrastructure and security incidents
• Maintain technical documentation, operational procedures, and security standards
• Ensure infrastructure and cloud environments comply with internal ecosystem security policies and industry standards such as ISO 27001 and NIST
• Research and evaluate new security technologies, cloud solutions, and industry best practices to continuously improve the overall security posture
  
  

Tələblər

• Knowledge of cloud platforms: Amazon Web Services (AWS), Microsoft Azure
• Hands-on experience with Linux OS installation, configuring, and maintaining, manual partitioning, LVM, disk partition management, and mounting disk partitions, Design and implement Linux based services ( Firewall, Apache, NGinx, HAProxy etc)
• Working knowledge of networking fundamentals (subnetting, routing, and DNS etc.)
• Experience with Cloud solution as AWS, Azure and etc., microservices and containerization ( Kubernetes, EKS etc.), DevOps technologies and tools (Ansible, Terraform etc.) is plus
• Certifications or equivalent knowledge of the AWS and Azure ( mostly security ) related
• Hands-on experience with: IAM / RBAC / least privilege models, VPC, VPN, subnetting, routing, firewalls, Security Groups / NSG / WAF, CSPM / CNAPP solutions
• Understanding of: Zero Trust architecture, Encryption & key management, Cloud-native security controls, DevSecOps practices