Cloud Security Engineer
MINFY Technologies Pvt Ltd · Hyderabad · onsite · Posted today
Not disclosedFresherfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Key Responsibilities
- Cloud Security Architecture & Design Controls
- Design and implement secure, scalable, and resilient AWS cloud architectures aligned with enterprise security standards and best practices.
- Define security controls for AWS environments, including account structures, landing zones, workload isolation, and security boundaries.
- Design and implement network segmentation using VPCs, subnets, security groups, Network ACLs, AWS Network Firewall, and other cloud-native security controls.
- Establish appropriate security controls for internet-facing, internal, and highly sensitive workloads.
- Design secure connectivity between AWS, on-premises data centers, and third-party environments.
- Implement encryption for data at rest and in transit using services and technologies such as AWS KMS, TLS/SSL, and certificate management.
- Conduct security architecture reviews for new cloud workloads, migrations, application modernization, and cloud transformation initiatives.
- Identify security risks in proposed architectures and provide practical recommendations to mitigate those risks.
- Develop and maintain cloud security reference architectures, security patterns, standards, and design guidelines.
- Ensure security controls are consistently applied across development, testing, and production environments.
- Identity & Access Management (IAM)
- Design and maintain robust Identity and Access Management (IAM) controls based on the principles of least privilege and zero trust.
- Define and manage IAM roles, policies, permission boundaries, service roles, and cross-account access.
- Implement and enforce Multi-Factor Authentication (MFA) and strong authentication mechanisms.
- Establish appropriate access controls for employees, administrators, applications, workloads, and third-party users.
- Implement secure privileged-access mechanisms for administrative and high-risk accounts.
- Integrate AWS environments with enterprise Identity Providers and Single Sign-On (SSO) platforms.
- Regularly review IAM permissions to identify excessive, unused, or inappropriate access.
- Identify and remediate risks such as overly permissive IAM policies, exposed credentials, inactive accounts, and inappropriate privilege escalation paths.
- Establish processes for joiner, mover, and leaver access management.
- Support periodic access reviews and provide evidence for security and compliance audits.
- Security Automation & DevSecOps
- Integrate security controls and automated security checks into CI/CD pipelines.
- Implement security testing across infrastructure, application, container, and cloud configurations.
- Use Infrastructure-as-Code (IaC) tools such as Terraform to consistently deploy and manage cloud security controls.
- Implement automated checks for infrastructure misconfigurations, insecure configurations, and policy violations before deployment.
- Introduce policy-as-code and automated compliance validation where appropriate.
- Automate remediation of common cloud security misconfigurations and security findings.
- Work closely with DevOps and engineering teams to embed DevSecOps practices into the software development lifecycle.
- Develop reusable Terraform modules, security templates, policies, and automation frameworks.
- Ensure security controls are repeatable, auditable, version-controlled, and integrated into automated deployment processes.
- Continuously improve the organization's security posture through automation and standardization.
- Strong analytical and problem-solving skills.
- Ability to translate security requirements into practical cloud architectures and technical controls.
- Strong communication and stakeholder-management skills.
- Ability to work across architecture, engineering, DevOps, infrastructure, and security teams.
- Strong ownership of security risks and remediation.
- Ability to balance security, business requirements, operational considerations, and delivery timelines.
Sourced from foundit
Skills
Terraformaws iamSSLamazon web servicesDevsecopsSecurity GroupsVPCsSubnetsAWS KMSnetwork ACLsAWS Network FirewallCi/Cd
About Minfy Technologies
MINFY Technologies Pvt Ltd
IT Services & Consulting
300
employees
2010
16 years old
Hyderabad / Secunderabad, Telangana
India
₹9L PA avg
Avg at Minfy Technologies
About
Minfy Technologies helps enterprises accelerate Digital Transformation, Cloud Adoption, & Innovation with transformative services around Cloud Consulting, Migration & Legacy Modernization, etc.
Industries
IT Services & ConsultingEmerging Technologies
Employee ratings
10 reviews
3.3/ 5
Culture
3.5
Career growth
3.3
Work-life
3.9
Employees rate it well for
Skill Development35Overall Company33
Find them on