Devops CloudSecurity Engineer

DevOps Cloud Security Engineer

Work location – San Antonio TX or Irvine, CA

Is it Hybrid, onsite or remote position - Onsite

Tentative Start date - Immediate

Contract duration – 12 Months

Mandatory skills – DevOps Handson expert and Cloud Security Expert

Minimum years of experience needed in the required skills- 6-8

Minimum overall work experience required 8-10

Domain - Finance

Any certification required – DevOps and CloudSec certifications helps

Interview mode - In person/Virtual – Virtual video interview (Don't want Folks using techniques and seeking help during interviews)

How many rounds of interview – 3 (2 Technical Rounds by INFY and one final Client Round with core technical skills being screened)

Key Responsibilities:

• Develop Cloud Security Runbooks (aka blueprints) for sanctioned cloud services such as S3, Lambda, RDS, etc..
• Design and implement Cloud Security preventive and detective guardrails using CSPM (Cloud Security Posture Management).
• Design and implement security controls CI/CD pipelines using tools such as Harness, and GitHub.
• Develop and maintain Infrastructure as Code (IaC) using Terraform and AWS CloudFormation.
• Integrate security controls and automated testing into the software development lifecycle (SDLC).
• Collaborate with cloud engineers to ensure secure deployment and configuration of services in AWS and Azure.
• Write and maintain automation scripts in Python to support security monitoring, compliance, and remediation.
• Conduct security reviews, and vulnerability assessments of cloud services and cloud-native applications.
• Monitor and respond to security events and alerts related to cloud infrastructure and DevOps pipelines.
• Stay current with emerging threats, vulnerabilities, and compliance requirements relevant to financial services.

Qualifications Required:

• 6+ years of experience in Cloud Security Engineering & DevSecOps, Cloud Security, or a related field.
• Strong hands-on experience with AWS and/or Azure security services.
• Proficiency in Python for scripting and automation.
• Experience with CI/CD tools such as Harness, or similar.
• Solid understanding of container security (e.g., Docker, Kubernetes).
• Familiarity with security frameworks such as NIST, CIS Benchmarks, or ISO 27001.

Preferred:

• Experience in a regulated industry, preferably financial services or wealth management.
• Experience with JIRA, Power BI