Senior Domain Manager Cloud

Job Purpose
To design, implement, operate, and govern enterprise-grade encryption key management, secrets management, and vault platforms across multi-cloud environments including Azure, AWS, GCP, Oracle Cloud, and IBM Cloud. The role involves supporting day-to-day cloud operations, resolving escalated issues, assisting in large-scale cloud migrations, and ensuring performance, security, and reliability of mission-critical workloads hosted on Azure.
Duties and Responsibilities
A-Minimum required Accountabilities for this role

B-Additional Accountabilities pertaining to the role
Major Challenges

Managing consistent encryption and secrets strategy across five different cloud providers

Ensuring high availability and lowlatency access to vault services for missioncritical workloads

Handling key rotation and zerodowntime secrets updates for production systems

Meeting strict regulatory and audit requirements in financial services

Securing secrets across diverse runtimes: VMs, containers, Kubernetes, serverless, and legacy systems

Coordinating with multiple teams under tight delivery and security SLAs

Required Qualifications and Experience
a)Qualifications

Bachelors degree in Computer Science, Information Technology, Cybersecurity, or related field

710 years of overall IT experience with 5+ years in Cloud Security / Key Management
b)Work Experience
Key Management Cryptography

Strong handson experience with:

Azure Key Vault Managed HSM

AWS KMS CloudHSM

GCP Cloud KMS

OCI Vault

IBM Key Protect

Understanding of encryption algorithms, TLS, certificates, PKI, asymmetric/symmetric cryptography

CMK, BYOK, HYOK, envelope encryption patterns

Secrets Vault Management

Secrets lifecycle management for:

Database credentials

API keys, tokens, certificates

Application and platform secrets

HashiCorp Vault architecture, HA setup, and integrations (preferred)

Cloud Platform Integration

Kubernetes secrets integration (AKS, EKS, GKE, OKE)

Secure CI/CD integrations (Azure DevOps, Jenkins, GitHub Actions)

IAM, RBAC, workload identity, and leastprivilege access

Automation DevSecOps

Infrastructure as Code using Terraform

Automation using Python, PowerShell, Bash

Policy as Code and security guardrails

Monitoring, Audit Compliance

Key usage logging, audit trails, alerting

Compliance mapping for PCIDSS, ISO, SOC2, RBI guidelines

Incident management and root cause analysis (RCA)