HDFC Securities - Cloud/Network Security Engineer (5-10 yrs)

Key Responsibilities :

Cloud Architecture and Design :

- Design and build cloud Network & Security infrastructure on AWS

- Collaborate with architects and other teams to design scalable, secure, cost-effective cloud solutions.

Cloud implementation :

- Deployment and configuration of cloud services, ensuring high availability, performance, and security.

- Implement best practices for resource tagging, monitoring, and cost optimisation.

Cloud Operations :

- Manage the cloud Network & Security infrastructure on AWS

- Manage AWS services like: S3, Load Balancers, Transit Gateway, Direct Connect, IPsec VPN, WAF, Network Firewall, Guard Duty, Cloud trail, Security HUB, SCP, IAM, Control Tower, CDN, Glue, Athena, Cloud9, ALB,NLB,GWLB

- Strong knowledge of Networking Protocol(BGP)

- Manage AWS Landing zone and lends improvement to the architect with his/her expertize

- Possess knowledge of Palo Alto Firewall to manage the 24-7 support on Cloud

- Provide advanced system administration, operational support and problem resolution for a complex cloud computing environment on AWS platform

- Collaborate with compliance and security teams to ensure optimal configuration of Cloud Infrastructure as per security best practices

- Design, create, develop, own and maintain operational procedures for onboarding, managing cloud platform to meet defined SLAs

- Ensure business uptime of Landing Zone Infrastructure

- Working Knowledge of Terraform for IaaC

- Hands-on Experience with AWS CDN and WAF

- Hands-on Experience with AWS SSO /IAM, VPN.

Security and Compliance :

- Work closely with the security team to ensure cloud environments meet industry standards and compliance requirements

- Work with IT Information Security Officer to oversee information security, cybersecurity and IT risk management programs based on industry-accepted information security and risk management frameworks

- Manage our environments to be compliant with industry standard regulations for security and reliability

- Implement and oversee security measures, including identity and access management, encryption, and vulnerability management

Team Leadership

- Mentor a team of cloud engineers, fostering a culture of collaboration, innovation, and continuous learning.

Performance Optimization

- Monitor and analyse cloud infrastructure performance, identifying bottlenecks and opportunities for optimisation.

- Implement strategies to improve scalability and resource utilisation.

Disaster Recovery and Business Continuity :

- Maintain disaster recovery plans and procedures to ensure business continuity during system failures or disasters.

- Evaluate and manage relationships with cloud service providers, optimising costs and leveraging new services and features.

Desired Attributes :

1. At least 3-5 years of cloud network & security operations experience in a high-tech environment with an overall 6-10 of years of experience in the IT

2. 2+ years of recent AWS experience

3. Hands-on experience with Network, Security, Cloud services - Storage, DNS, LB, Transit Gateway, Direct Connect

4. Experience with the configuration and implementation of IaaS, PaaS and Infrastructure as Code

5. Should have good communication skills - written, verbal, vendor co-ordination

6. Should have good documentation skills - Define guidelines, policies & procedures

7. Responsibilities require sometimes to work during late hours/holidays and with short notice

8. BE/B Tech from Tier II Engineering college and with good grades

9. AWS Solution architect certificate will be an added advantage