Cloud Engineer

Position: Technical Lead – Forcepoint (Data & Cloud Security)

Company: Inflow Technologies

Location: Bangalore

Work Mode: Work From Office | 5 days/week

Experience Required: Minimum 6 years

Interview Process: 2 rounds (Virtual + Final Face-to-Face)

About Inflow Technologies

Founded in 2005, Inflow is a value-added IT infrastructure distributor covering Networking, Cybersecurity, UC&C, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ'd in Bangalore with 20+ locations, backed by a 120+ certified technical team, and ~USD 700M+ annual run-rate revenue.

Position Overview

Acting as the Forcepoint subject matter expert, this role owns end-to-end design, deployment, and troubleshooting of enterprise data and cloud security architectures — spanning DLP, SWG, CASB, and SSE/ZTNA. The role sits at the intersection of solution architecture and hands-on L3 execution: defining security policies, configuring network proxies, and resolving complex support escalations in a client-facing, consultative capacity.

Core Products

• Forcepoint DLP (Endpoint, Network, Web, Email)
• Forcepoint Web Security
• Forcepoint Email Security
• Forcepoint CASB
• Forcepoint Suite / Forcepoint One
• Forcepoint Cloud Security / SSE (incl. ZTNA)
• Forcepoint DSPM

Key Responsibilities

1. Solution Design & Architecture

• Design enterprise architectures: DLP (Endpoint + Network + Discovery), Web Security (Proxy/Hybrid/Cloud), CASB & SaaS protection, Forcepoint Suite/One
• Install & configure Management Server, Policy Engine, Detection Servers, Protectors (Email/Web/Network), Endpoint agents (Windows/Mac)
• Implement EDM/IDM/OCR and data classification policies

2. Web Security (SWG)

• Deploy on-prem (V-series appliances) and cloud SWG/hybrid mode
• Configure transparent/explicit proxy, SSL inspection, URL filtering

3. Email Security

• Configure SMTP routing, DLP email policies, encryption & compliance rules

4. Advanced Policy Configuration

• Design/tune DLP policies (structured + unstructured data), web filtering (user/group/app-based), cloud app governance rules

5. L3 Troubleshooting & RCA (Critical)

• Handle: DLP not detecting over HTTPS, endpoint agent communication failures, web proxy latency/SSL failures, policy not applying to users, email DLP bypass
• Approach: log analysis (Policy Engine, endpoint, web), packet capture/traffic analysis, root cause identification & permanent fix

Qualifications & Certifications (Preferred)

• Bachelor's degree (IT/CS or related)
• Forcepoint Certified Administrator (FCA)
• Forcepoint DLP Specialist
• CCNA / Security+ (nice-to-have)

The role primarily focuses on the administration and operational support of security platforms, with a heavy emphasis on Netskope. 

You will:​

• Administer and optimize security platforms including Netskope (CASB/SSE), CyberArk EPM,  Mimecast, and others​
• Monitor, analyze, and respond to security events generated by these platforms, ensuring timely triage and resolution​
• Develop, tune, and maintain security policies (DLP, web controls, email security, endpoint privilege management) to reduce risk and false positives​
• Lead troubleshooting and root cause analysis for security incidents and platform issues across endpoint, cloud, and email security domains​
• Collaborate with engineering, IT, and business teams to implement security controls and drive remediation of identified risks​
• Integrate security tools with ServiceNow for incident management, request workflows, and automated response actions​
• Build and maintain operational dashboards and reporting for security posture, tool effectiveness, and KPIs​
• Support onboarding of new applications, users, and use cases into Netskope, Mimecast, and CyberArk EPM​
• Contribute to security architecture decisions and continuous improvement of tooling and processes​
• Develop and maintain runbooks, standard operating procedures, and knowledge base documentation 

You bring:

​

• Bachelor’s degree or 5+ years of equivalent experience in Cybersecurity or related field​
• 7+ years of experience in security engineering or security operations roles​
• Strong hands-on experience with Netskope (CASB/SSE), CyberArk EPM, and Mimecast administration and operations​
• Experience integrating and operating workflows within ServiceNow (incident, change, and request management)​
• Solid understanding of endpoint security, DLP, email security, and cloud security concepts​
• Experience tuning security tools to reduce false positives and improve detection fidelity​
• Familiarity with identity and access management concepts, including privilege management and least  privilege principles​
• Ability to analyze security events and translate findings into actionable remediation steps​
• Strong cross-functional collaboration and communication skills​
• Experience developing documentation, runbooks, and operational processes​
• Ability to manage multiple priorities and operate effectively in a fast-paced environment 

MUST HAVE: Netskope Subject Matter Expertise (SME) 

• Netskope expertise is non-negotiable. 
• Candidates must be capable of serving as effective platform administrators. 
• Candidates should have a deep understanding of security policies within Netskope. 

Responsibilities 

The successful candidate will: 

• Support Netskope as the primary platform. 
• Administer and maintain security controls. 
• Fine-tune DLP policies. 
• Investigate access-related platform issues. 
• Support ticket resolution related to Netskope. 
• Work with feedback coming from the SOC team. 
• Manage policy adjustments to reduce false positives. 

Company Description

Appiness Interactive Pvt. Ltd. is a Bangalore-based product development and UX firm that specializes in digital services for startups to fortune-500s. We work closely with our clients to create a comprehensive soul for their brand in the online world, engaged through multiple platforms of digital media. Our team is young, passionate, and aggressive, not afraid to think out of the box or tread the un-trodden path in order to deliver the best results for our clients. We pride ourselves on Practical Creativity where the idea is only as good as the returns it fetches for our clients.

Role Overview

We are looking for an experienced Senior Cloud Security Engineer with 7+ years of experience, including strong hands-on expertise in AWS Cloud Security. The candidate will be responsible for designing, implementing, assessing, and continuously improving security across AWS cloud environments. The role requires strong knowledge of cloud security architecture, IAM, network security, threat detection, vulnerability management, incident response, security monitoring, encryption, and DevSecOps.

This is a highly technical position. Hands-on technical expertise will be given significantly more importance than communication skills. Good written and verbal communication is sufficient.

Key Responsibilities

• Design and implement secure AWS cloud architectures.
• Establish and maintain AWS security best practices and security controls.
• Implement IAM, RBAC, least-privilege access, MFA, federation and privileged access controls.
• Secure AWS networking including VPCs, Security Groups, NACLs, routing, private/public subnets and VPC endpoints.
• Implement and manage AWS security services including:
• AWS IAM
• AWS KMS
• AWS CloudTrail
• Amazon GuardDuty
• AWS Security Hub
• AWS Config
• AWS WAF
• AWS Secrets Manager
• Monitor and investigate security events, threats and suspicious activities.
• Lead or participate in cloud security incident response and root-cause analysis.
• Conduct vulnerability assessments and coordinate remediation.
• Perform AWS security posture reviews and identify misconfigurations.
• Review cloud architectures and provide security recommendations.
• Implement encryption and data protection controls.
• Secure CI/CD pipelines and support DevSecOps practices.
• Review Infrastructure as Code for security risks.
• Implement security automation wherever possible.
• Work with engineering, DevOps and infrastructure teams to embed security into the development lifecycle.
• Establish security standards, policies and controls for AWS environments.
• Support compliance requirements and security audits.
• Mentor junior engineers and provide technical guidance.

Mandatory Technical Skills

Must Have

• 7+ years of overall IT/Security/Cloud experience
• Strong AWS Cloud Security experience
• Hands-on AWS security architecture
• AWS IAM
• IAM policies, roles, permissions and least privilege
• AWS networking security
• VPC, Security Groups and NACLs
• CloudTrail and security logging
• GuardDuty
• Security Hub
• KMS and encryption
• Vulnerability management
• Cloud security monitoring
• Incident response
• Security hardening
• Security architecture/design

Good to Have

• AWS Organizations / SCP
• Terraform / CloudFormation
• DevSecOps
• CI/CD security
• Docker/Kubernetes security
• SAST/DAST/SCA
• SIEM tools
• Python/Bash/PowerShell scripting
• CIS Benchmarks
• NIST
• ISO 27001
• SOC 2
• AWS security certifications

Job description: Data Architect – Databricks / AWS

Job Summary

We are looking for an experienced Data Architect to define and drive the target data architecture for the Horizon MVP and its future evolution. The role will be responsible for designing a scalable, secure, governed cloud data platform covering ingestion, storage, processing, analytics, APIs, and downstream data consumption.

The architect will work closely with Data Engineering, Backend, DevOps, QA, and business stakeholders to establish architecture standards and ensure the platform is ready for advanced analytics, AI/ML, vector storage, and future LLM-based capabilities.

• Job Title: Data Architect
• Experience: 8+ Years
• Relevant Architecture Experience: 3+ Years in Data Architecture
• Location: Chennai / Pune
• Work Mode: Hybrid – 3 Days WFO
• Budget: Up to 24 LPA
• Payroll: Haparz
• Notice Period: Immediate Preferred

Key Responsibilities

• Define the target data architecture for the Horizon MVP and establish an architecture roadmap for future scalability.
• Design end-to-end architecture covering data ingestion, storage, processing, serving, reporting, APIs, and downstream applications.
• Establish canonical data models and schemas for travel signals, corridors, sources, evidence, scores, and generated insights.
• Define data normalization strategies for structured, semi-structured, and unstructured data from multiple external sources.
• Design and govern the Databricks platform architecture, including Unity Catalog, data schemas, access controls, and governance standards.
• Establish data-retention, lineage, data-quality, security, privacy, and compliance controls.
• Define secure integration patterns between Databricks, AWS PRODIGY, SharePoint, external APIs, and downstream applications.
• Design scalable data processing for 30-day signal windows, convergence/divergence scoring, corridor ranking, and spike detection.
• Define architecture patterns that support future vector storage, embeddings, LLM integration, and multi-year analytics.
• Design reliable batch and API-driven ingestion frameworks for structured and unstructured data.
• Review technical designs, identify architectural risks, and provide technical direction to engineering teams.
• Guide backend, data engineering, DevOps, and QA teams in implementing architecture standards.
• Ensure architecture decisions align with enterprise security, RBAC, PII handling, privacy, and operational requirements.
• Communicate architecture decisions, trade-offs, and technical recommendations effectively to technical and business stakeholders.
• 
  

What We’re Looking For

• 8+ years of experience in data engineering, data platforms, or data architecture, with at least 3+ years in a Data Architect capacity.
• Strong hands-on experience designing cloud-based data platforms, lakehouses, or analytical platforms.
• Advanced knowledge of Databricks, Apache Spark/PySpark, Delta Lake, and Unity Catalog.
• Strong understanding of AWS data services, IAM, networking, and secure cloud integration patterns.
• Strong expertise in data modelling, metadata management, data lineage, data quality, retention, and governance.
• Experience architecting batch and API-based ingestion pipelines for structured, semi-structured, and unstructured data.
• Understanding of AI/ML workloads, feature pipelines, vector databases, embeddings, and LLM integration patterns.
• Experience designing APIs and downstream data-serving architectures.
• Strong knowledge of PII protection, RBAC, data privacy, and enterprise security controls.
• Excellent architectural communication and stakeholder-management skills.

Roles & Responsibilities:-

1. Develop and maintain enterprise data governance strategies, policies, and standards aligned with business goals
2. Manage Microsoft Purview accounts, collections, and RBAC; optimize for large-scale environments (50TB+)
3. Design metadata repositories and maintain business glossaries and data dictionaries
4. Implement ingestion workflows via ADF, REST APIs, PowerShell, Azure Functions
5. Define classification rules and sensitivity labels (PII, PCI, PHI); integrate with MIP, DLP, Insider Risk Management
6. Define KPIs and dashboards to monitor data quality across domains
7. Maintain business glossary with domain owners and stewards; enforce approval workflows
8. Automate governance processes using PowerShell, Azure Functions, Logic Apps
9. Set up dashboards for audit logs, compliance reporting, and metadata coverage
10. Collaborate across business, IT, legal, and compliance teams for role alignment

Ideal Candidate:-

1. Strong Data Governance Lead Profile with deep Microsoft Purview and enterprise governance expertise
2. Mandatory (Experience 1): Must have 7+ years of experience in data governance and data management with at least the recent 3+ years of exposure in Microsoft Purview
3. Mandatory (Experience 2): Must have experience defining, leading, and operationalizing an enterprise data governance framework — strategy, policies, and standards aligned to business goals and regulatory compliance.
4. Mandatory (Tech skill 1): Must be proficient in Microsoft Purview — accounts, collections, RBAC, classification/labelling, DLP, Unified Catalog, Data Map, eDiscovery, Compliance Manager, and lifecycle/records management (ideally at large scale, 50TB+).
5. Mandatory (Tech skill 2): Must be strong in metadata management, lineage mapping (e.g. ADF → Synapse → Power BI), data classification, and security governance (PII/PCI/PHI, sensitivity labels, MIP/DLP)
6. Mandatory (Tech skill 3): Must have experience with data governance tools such as Informatica (Axon), Collibra, Atlan, or IBM IG Catalog.
7. Mandatory (Tech skill 4): Must have experience integrating governance with the Azure data stack (Data Lake, Synapse, SQL DB, Power BI) and Snowflake, and automating via ADF, REST APIs, PowerShell, Azure Functions / Logic Apps.
8. Mandatory (Tech skill 5): Must have experience defining data quality KPIs/dashboards, remediation workflows, and business glossary/stewardship (domain owners, approval workflows, metadata audits)
9. Mandatory (Compliance): Must have strong knowledge of GDPR, CCPA, HIPAA, and SOX compliance requirements.
10. Mandatory (Skill): Must be able to bridge technical governance with business and compliance goals, collaborating across business, IT, legal, and compliance teams, and driving governance training and change management
11. Mandatory (Company): B2B Tech/Consulting/B2B Software

DevOps & Cloud Security Specialist to architect enterprise-grade AWS networking, implement strict IAM security boundaries (HIPAA/GDPR compliance), automate infrastructure via IaC, and maintain crystal-clear technical documentation.

1. Primary Must-Have Competencies (Core Priorities)

A. AWS Networking & VPC Topology (Top Priority)

• Advanced VPC Architecture: Mastery in designing multi-VPC topologies, isolated subnets, custom Route Tables, NAT Gateways, Transit Gateways, and Cross-Region VPC Peering.
• Private Network Security: Extensive experience using VPC Endpoints (Gateway & Interface/PrivateLink) to keep internal AWS traffic completely off the public internet.
• Traffic Ingestion & Edge Security: Expertise in AWS WAF (custom rules, bot control, rate limiting), API Gateway throttling, ALB configuration, and Route 53 global routing.

B. AWS Security, IAM Architecture & Compliance

• Enterprise IAM Governance: Expertise in AWS Organizations, IAM Identity Center (SSO), Permission Boundaries, Service Control Policies (SCPs), and temporary role assumption across multi-account setups.
• Data Protection & Key Management: Deep knowledge of AWS KMS (customer-managed keys, envelope encryption at rest and in transit) and AWS Secrets Manager.
• Audit & Compliance: Setting up centralized logging pipelines (CloudTrail, GuardDuty, AWS Config, CloudWatch Audit Logs) for strict HIPAA/GDPR compliance.

C. Infrastructure as Code (IaC) & Containerization

• Terraform / AWS CDK: Must write production-grade, modular IaC templates from scratch—enforcing network topology and security guardrails directly in code.
• Container Orchestration: Hands-on setup and management of AWS ECS (Fargate) or EKS (Kubernetes) and automated CI/CD pipelines (GitHub Actions, GitLab CI).

D. Architecture Documentation & Systems Mapping

• Technical Documentation: Ability to author clean, standardized architecture diagrams (e.g., C4 model, Draw.io, Lucidchart) and maintain comprehensive runbooks, incident response plans, and compliance documentation.

2. Secondary Competency (Strong Advantage, Not Mandatory)

• Backend Software Development: Hands-on experience or a background in writing/debugging backend code in Node.js, Python, or Go.
• Note: The primary responsibility is cloud infrastructure, security, and automation. However, the ability to read backend code, debug API bottlenecks, or assist developers with microservice integrations is a major bonus.