esecforte - Cloud Security Engineer - iAM/Active Directory (2-4 yrs)

We're looking for an experienced Cloud Security Engineer to ensure the integrity and security of our cloud environments.

If you're passionate about cybersecurity and thrive on building secure cloud infrastructures, this role is perfect for you!

Key Responsibilities :

- Perform in-depth testing of cybersecurity controls across various cloud platforms to assess control effectiveness, ensuring compliance with internal cybersecurity policies and external requirements (certifications, regulations, contracts).

- Enforce cloud platform-specific security policies, standards, and procedures, focusing on:

- Management group and account/subscription management Configuration management (e.g, Azure Policy, Azure Security Center, AWS Config)

- Identity management and access control

- Firewall management and auditing/monitoring practices

- Security Incident and Event Management (SIEM) for proactive risk management

- Data protection strategies and user/admin account management

- Single Sign-On (SSO), conditional access controls, and password/secrets management

Skills Required :

- Expertise in AWS and Azure cloud platforms, including security services like AWS Config, Azure Policy, and Azure Security Center.

- Proficiency in cloud security tools such as AWS IAM, Azure Active Directory, and Microsoft Defender for Cloud.

- Strong understanding of identity and access management (IAM), role-based access control (RBAC), multi-factor authentication (MFA), and Single Sign-On (SSO) configuration.

- Experience with data protection strategies, including encryption at rest/in transit and key management.

- Knowledge of Microsoft Defender & securing cloud infrastructure, including network security groups (NSGs), firewalls, and virtual private clouds (VPCs)