Cloud Security Solutions Architect at Searce Inc · Pune, Hyderabad, Mumbai · 8 - 15 years · Profitable · Posted 10 Aug 2026
Job Description - Security Solutions Architect
Job Title
Security Solutions Architect / Senior Security Solutions Architect
Practice: Cloud Security & Reliability Engineering (CSR)
Location: India
Regional Coverage: EU/UK, Middle East & Africa (MEA), India, and APAC
Experience:
- Security Solutions Architect: 8–10 years
- Senior Security Solutions Architect: 10–12+ years
Role Overview
We are looking for an experienced Security Solutions Architect / Senior Security Solutions Architect to drive security solutioning across complex cloud, hybrid, and multi-cloud customer environments.
This is a customer-facing solution architecture role operating at the intersection of cloud security, cybersecurity transformation, compliance, pre-sales solutioning, and delivery readiness. The architect will work closely with customers, sales, practice leaders, OEM partners, and delivery teams to understand business and security challenges and translate them into technically robust, commercially viable, and executable security solutions.
The role requires someone who can go beyond product-led solutioning. The successful candidate should be able to understand a customer's existing security landscape, identify risks and capability gaps, define the target-state architecture, and build a clear transformation roadmap.
Given our coverage across EU/UK, MEA, India, and APAC, the architect must also be comfortable adapting security architectures to different regulatory, data sovereignty, industry, and operational requirements.
A strong foundation in Google Cloud Security is mandatory, complemented by hands-on knowledge of modern security platforms, particularly CNAPP/CSPM technologies such as Wiz. Experience across Microsoft security and other cybersecurity platforms will be an advantage.
Key Responsibilities
Security Solution Architecture & Consulting
- Own end-to-end security solution architecture for cloud, hybrid, and multi-cloud customer environments.
- Lead technical discovery and security assessment workshops to understand the customer's current environment, security posture, business objectives, risks, regulatory obligations, and operational challenges.
- Translate customer requirements into scalable, secure, resilient, and commercially viable solution architectures.
- Develop current-state and target-state security architectures, transformation roadmaps, and solution blueprints.
- Design security solutions across areas such as:
- Cloud Security and Cloud-Native Security
- CNAPP, CSPM, CWPP, and Cloud Security Posture Management
- Security Operations and SIEM/SOAR modernization
- Threat Detection and Response
- Identity and Access Management
- Data Security and Data Protection
- Network and Zero Trust Security
- Vulnerability and Exposure Management
- Security Automation and AI-driven Security Operations
- Cyber Resilience and Security Monitoring
Google Cloud Security
- Architect and demonstrate Google Cloud security capabilities across cloud-native and enterprise security use cases.
- Design solutions leveraging relevant Google Cloud security services and technologies for security posture management, threat detection, security operations, data protection, identity, and workload security.
- Translate Google Cloud security capabilities into business and security outcomes relevant to the customer's environment.
- Conduct customer demonstrations, technical workshops, architecture discussions, and proof-of-concept engagements.
- Maintain awareness of evolving Google Cloud security capabilities and incorporate them into solution offerings and reusable architectures.
CNAPP / CSPM & Wiz
- Architect and demonstrate CNAPP and CSPM solutions, with strong hands-on experience in Wiz.
- Design cloud security posture, workload protection, vulnerability management, attack-path analysis, and cloud risk management solutions.
- Position CNAPP capabilities as part of a broader cloud security operating model rather than as a standalone technology deployment.
- Integrate CNAPP capabilities into security operations, governance, compliance, and remediation workflows.
Security Operations & Transformation
- Support customers in modernizing traditional security operations toward cloud-native and AI-enabled security operations.
- Design architectures for SIEM/SOAR modernization, security data onboarding, threat detection, incident response, automation, and security analytics.
- Understand existing customer security ecosystems and define integration approaches across cloud platforms, security tools, identity systems, network infrastructure, and enterprise applications.
- Identify opportunities to simplify fragmented security architectures and improve security effectiveness through platform consolidation and automation.
Compliance & Regulatory Architecture
- Translate regulatory and compliance obligations into practical security architecture and technical controls.
- Design solutions considering relevant frameworks and regulatory requirements, including:
- GDPR and data protection requirements across EU/UK
- Data residency, sovereignty, and localization requirements
- Security and regulatory frameworks applicable across UAE and KSA
- India DPDP Act and relevant sector-specific requirements
- RBI and IRDAI requirements for regulated Indian financial services organizations
- Relevant APAC regulatory and cybersecurity frameworks
- Industry standards such as ISO 27001, PCI DSS, and other applicable security frameworks
- Work with customers in regulated industries including BFSI, government/public sector, healthcare, and other compliance-sensitive environments.
The architect is not expected to act as a legal or compliance auditor but must be capable of translating applicable regulatory and security requirements into appropriate architectural controls and solution designs.
Pre-Sales, SOW & Commercial Solutioning
- Own the technical solutioning lifecycle from initial discovery through proposal, technical closure, and handover to delivery.
- Develop end-to-end Statements of Work (SOWs), including:
- Scope
- Technical solution and architecture
- Deliverables
- Implementation approach
- Effort estimation
- Assumptions and dependencies
- Exclusions
- Acceptance criteria
- Build commercial solutions using standard pricing and estimation frameworks while balancing customer competitiveness, delivery feasibility, risk, and target margins.
- Contribute to RFP/RFI responses, proposals, presentations, solution workshops, and executive-level customer discussions.
- Present and defend proposed architectures with customer CISOs, security leaders, cloud teams, enterprise architects, compliance stakeholders, and technical teams.
- Clearly articulate solution value, differentiation, risks, trade-offs, and expected security outcomes.
Delivery Readiness & Governance
- Validate solution feasibility with delivery and engineering teams before customer commitment.
- Ensure that proposed scope, architecture, effort, timelines, and assumptions are aligned with delivery capabilities.
- Lead structured sales-to-delivery handovers and remain engaged during critical transition stages.
- Minimize delivery rework and commercial leakage by ensuring that customer commitments are clearly documented and technically validated.
Practice Development
- Build reusable security solution architectures, reference designs, SOW templates, pricing models, discovery frameworks, and accelerators.
- Develop repeatable solution patterns for common industry and regulatory scenarios.
- Contribute to the evolution of the CSRE security services portfolio and go-to-market offerings.
- Work with technology partners and OEMs to develop joint solutions, demonstrations, and market propositions.
- Support internal sales and technical teams through enablement sessions and solution playbooks.
- Mentor junior architects and security engineers, particularly at the Senior Security Solutions Architect level.
Must-Have Skills & Experience
- 8–12+ years of relevant experience across cybersecurity, cloud security, security architecture, consulting, or security solutioning.
- Strong hands-on experience with Google Cloud Security, with the ability to architect, demonstrate, and position security capabilities in customer environments.
- Strong hands-on experience with CNAPP/CSPM technologies, preferably Wiz.
- Strong understanding of cloud security architecture across IaaS, PaaS, containers, Kubernetes, cloud-native services, and hybrid environments.
- Experience designing security solutions for complex enterprise environments.
- Strong understanding of modern security architecture concepts across Security Operations, SIEM/SOAR, IAM, data security, network security, vulnerability management, and cloud workload protection.
- Experience designing solutions for regulated industries such as BFSI, government/public sector, or healthcare.
- Working knowledge of security, privacy, compliance, and data sovereignty requirements across relevant geographies.
- Demonstrated experience in customer-facing technical discovery, architecture workshops, and solution presentations.
- Experience independently developing SOWs, technical proposals, effort estimates, and commercial solutions.
- Ability to communicate complex security concepts clearly to technical, business, and executive stakeholders.
- Strong stakeholder management and presentation skills.
Good to Have
- Microsoft Azure and Microsoft Security experience, including exposure to technologies such as Defender, Sentinel, and Entra.
- Experience with Google Security Operations or SIEM/SOAR modernization programs.
- Experience with additional cloud and cybersecurity platforms across AWS, Azure, and multi-cloud environments.
- Exposure to AI-driven security operations, security automation, and emerging AI security technologies.
- Experience working with customers across EU/UK, MEA, India, or APAC.
- Experience working with large enterprise and regulated customers.
- Consulting, system integration, professional services, or managed security services background.
- Relevant cloud and cybersecurity certifications from Google Cloud, Wiz, Microsoft, AWS, or recognized security certification bodies.
What Success Looks Like
The successful architect will be able to:
- Independently lead complex customer security solutioning from discovery to technical closure.
- Build architectures that are secure, compliant, commercially competitive, and executable by delivery teams.
- Demonstrate and position Google Cloud Security and Wiz capabilities confidently in real customer scenarios.
- Convert complex customer security and regulatory challenges into clear solution architectures and transformation roadmaps.
- Produce high-quality SOWs with accurate scope, assumptions, effort, and commercial structure.
- Build trust with customer CISOs, security teams, enterprise architects, compliance stakeholders, and internal delivery teams.
- Create reusable security solution patterns that improve solutioning speed, quality, and consistency across regions.
Experience Level
Security Solutions Architect | 8–10 Years
Expected to independently lead discovery, architecture, solution design, demonstrations, SOW development, and technical solutioning for mid-size to large security engagements.
Senior Security Solutions Architect | 10–12+ Years
Expected to lead complex, strategic, multi-technology, multi-country, and compliance-intensive security engagements. Should be capable of engaging senior customer stakeholders, shaping security transformation programs, handling complex commercial and architectural decisions, mentoring other architects, and contributing to the development of the security practice and its go-to-market strategy.
Shubham Vishwakarma
Full Stack Developer - Averlon
About Searce Inc
About
What is ‘searce’
Searce means ‘a fine sieve’ & indicates ‘to refine, to analyze, to improve’. It signifies our way of working: To improve to the finest degree of excellence, ‘solving for better’ every time. Searcians are passionate improvers & solvers who love to question the status quo.
The primary purpose of all of us, at Searce, is driving intelligent, impactful & futuristic business outcomes using new-age technology. This purpose is driven passionately by HAPPIER people who aim to become better, everyday.
What we do
Searce is a modern tech consulting firm that empowers clients to futurify their businesses, leveraging Cloud, AI & Analytics.
- We are a category defining niche’ cloud-native technology consulting company, specializing in modernizing (improve, automate & transform) the full-scope of infra, app, process & work
- We partner with clients in their ‘beyond x’ journey to drive intelligent, impactful & futuristic business outcomes
- We are the most preferred tech partner of choice when it comes to ‘solving for better’ for the new-age tech startups & digital enterprises, leading disruption in their industries
- Our Service Offerings: We offer Advanced Cloud, Data & App Modernization, Cloud Consulting, Management & Improvement (DevOps, SysOps & Cloud Managed Services), Applied AI & Analytics services
- As one of the top 5 niche’ full scope global partners for Google Cloud & a preferred partner for AWS, we are the most preferred ‘engineering-led’ tech company of choice when it comes to solving complex business problems.
Who we are
We are passionate improvers, solvers & futurists. Driven by our engineering excellence mindset, we care most about delivering intelligent, impactful & futuristic business outcomes. Searcians are motivated by continuous improvement & solving for better in everything we do.
At the core, a Searcian is self-driven to become better, everyday. In passionate pursuit of the finest degree of excellence we drive exceptional outcomes in everything we do.
We believe that trust is the most important value. We also believe that we need to ‘earn the trust’, everytime one engages with us. And earning trust for us is far more important than anything else. We aim to be the *most trusted* tech consulting partner for our clients.
We are HAPPIER at heart. Humble, Adaptable, Positive, Passionate, Innovative, Excellence focused, & Responsible. We live the HAPPIER Culture Code.
Being HAPPIER.
How we work
- Customers. Partners. Our aim is to build relationships with customers for life. And meaningfully improve the life of every customer.
- We do what we say. We say what we do. We are uncomfortably honest and transparent. Being genuine wins trust & makes people happier.
- Mistakes are encouraged. We make mistakes. Tons of those. Everyday. And we don’t mind apologizing to our juniors, peers or superiors. We are no ego-doers.
- Underpromise. Overdeliver. We work with a deep desire to go above and beyond in everything we do. Everytime.
So, If you are passionate about tech, future & what you read above (we really are!), apply here to experience the ‘Art of Possible’
Company social profiles
Similar jobs (10)
Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)
Company: Inflow Technologies
Location: Bangalore (Work From Office, 5 days/week)
About Inflow Technologies:
Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.
Position Overview:
We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.
Key Responsibilities:
Implementation & Deployment
- Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
- Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
- Perform agent rollout across Windows, Mac, and Mobile
Architecture & Design
- Design a secure access architecture for remote users, branch offices, and cloud workloads
- Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
- Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
- Configure SSO/SAML authentication
Required Qualifications:
- Bachelor's degree in IT/CS or related field
- 6–8 years of experience (L3 level)
- Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)
Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)
About the Role
We are looking for a Solution Architect with 10–15 years of experience to design scalable, secure, and cloud-ready solutions. The role involves working with customers, Senior Solution Architects, business analysts, project managers, and engineering teams across cloud, modernization, microservices, integration, and digital transformation initiatives.
Must Have Skills
- 10–15 years of experience in software development, architecture, and enterprise application delivery.
- Strong experience with Azure and/or AWS and cloud-native architecture.
- Hands-on experience with Microservices, REST APIs, SOA, and system integration.
- Experience in application modernization and cloud migration.
- Knowledge of Docker, Kubernetes, CI/CD, and Infrastructure as Code.
- Understanding of cloud security, IAM, networking, monitoring, and disaster recovery.
- Ability to create architecture diagrams, solution designs, and technical documentation.
- Strong analytical, communication, and customer-facing skills.
Good To Have Skills
- AWS/Azure certifications.
- Experience with Serverless, Event-Driven Architecture, Messaging, and API Management.
- Exposure to SaaS / Multi-Tenant Architecture.
- Knowledge of Generative AI and AI-enabled solutions.
- Experience with pre-sales, POCs, estimations, and technical proposals.
- Exposure to application security and compliance.
- Experience working with global customers and distributed teams.
Responsibilities
- Design end-to-end solutions and independently own defined architecture workstreams.
- Translate business and technical requirements into application, cloud, integration, and deployment designs.
- Define microservice, API, integration, and data-flow architectures.
- Guide engineering teams on architecture implementation and conduct design/code reviews.
- Contribute to cloud migration, modernization, and digital transformation initiatives.
- Participate in customer workshops, technical discussions, POCs, and solution demonstrations.
- Identify and address architectural, performance, security, and technical risks.
- Ensure solutions follow defined architecture, security, and engineering standards.
- Work closely with the Senior Solution Architect on complex and strategic engagements.
- Develop reusable architecture patterns, templates, and technical accelerators
Next
KubernetesAbout Searce
Searce is a global, AI-native, engineering-led technology consultancy and a Premier Google
Cloud Partner — recognized as the Google Cloud Workplace AI Transformation Partner of the
Year, APAC (2026). With 20+ years of experience and 3,000+ clients across 10+ countries, we
help businesses stay ahead of the cloud curve.
The Role
We're looking for a Lead Cloud Security & Reliability Engineer with deep GCP expertise to own
end-to-end cloud reliability and security forAPAC enterprise clients. As Lead, you'll set the architectural direction, mentor your squad, and drive measurable client outcomes across multi-
cloud environments.
What You'll Do
Own Client Delivery — Lead 24x7 GCP cloud operations forAPAC clients. Define SLO frameworks and ensure adherence.
Architect Solutions — Design scalable, secure GCP-primary architectures with multi-cloud awareness.
Drive Reliability — Lead incident response, RCA, and long-term remediation across production systems.
Mentor & Elevate — Coach and grow a squad of Senior CSREs.
Drive FinOps — Own cloud cost governance and optimization with quantified impact.
Be the Expert — Represent Searce's technical depth in global client conversations.
What We're Looking For
Experience
7–12 years total with 5+ years on GCP cloud infrastructure
Strong background in Cloud Managed Services / MSP environments
Proven experience leading a team in client-facing delivery
Multi-cloud exposure (AWS/Azure secondary) preferred
Technical Skills (Must-Have)
- GCP: GKE, IAM, VPC, Cloud Monitoring, Stackdriver, KMS — demonstrated in work
- experience
- Kubernetes: GKE — production cluster management, Helm
- IaC: Terraform — module-level, reusable frameworks
- Observability: Prometheus, Grafana, Thanos or equivalent
- Security: IAM, Zero-trust, DevSecOps, CSPM tools
- Scripting: Python or Go
- FinOps: GCP cost governance demonstrated
Nice to Have
- GCP Professional Cloud Architect / Pro DevOps Engineer certification
- AWS / Azure secondary experience
- CKA (Certified Kubernetes Administrator)
- ITIL / change management awareness
- APAC client delivery experience
Why Searce?
🏆 Google Cloud Partner of the Year — APAC 2026
🌍 Work with APAC enterprise clients across multiple industries
🤖 AI-first, engineering-led culture
📈 Lead-level ownership with real career growth
🤝 HAPPIER values — Humble, Adaptable, Positive, Passionate, Innovative, Excellence,
Responsible
.NET
React.jsKey Responsibilities
· System Design: Design secure, scalable, and highly available multi-tenant cloud-based application architectures.
· Integration Strategy: Build robust APIs, webhooks, and data pipelines for complex enterprise client connections.
· Technical Guidance: Mentor software engineers and lead critical code and architecture reviews to ensure engineering excellence.
· Performance & Security: Drive non-functional infrastructure needs including high uptime, strict data privacy compliance, and fast application response times.
· Cross-Functional Collaboration: Partner closely with Product, Security, and Customer Success teams to align technical execution with business roadmaps.
Required Qualifications
· Experience: 8+ years of experience in software engineering with at least 3+ years operating as a technical or solutions architect within a B2B SaaS environment.
· Cloud & DevOps: Deep production knowledge of major cloud infrastructure (AWS, GCP, or Azure), containerization technologies (Docker, Kubernetes), and modern CI/CD automation pipelines.
· Architecture Patterns: Proven expertise designing microservices, event-driven architectures, and high-performance relational and NoSQL database structures.
· Communication: Strong written and verbal communication skills, with a proven ability to translate complex technical concepts clearly to both engineers and business stakeholders.
· Education: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent practical work experience).
Preferred Skills
· Prior experience managing architectural frameworks for enterprise compliance frameworks like SOC2, ISO 27001, or GDPR.
· Background in building real-time data processing engines, stream frameworks, or integrating enterprise AI/ML components.
Technical Consultant – Palo Alto Networks
Company: Inflow Technologies
Website: https://inflowtechnologies.com
About: Founded in 2005, Inflow Technologies is a niche IT Infrastructure Distribution Services player offering Value Added Distribution in Networking, Cybersecurity, UCC, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ in Bangalore, 20+ locations, 120+ certified technical resources, USD 700M+ annual run-rate revenue.
Location: Bangalore
Work Mode: Work From Office
Work Days: 5 days/week
Position Overview
Senior-level, high-impact technical role driving architecture, implementation, and optimization of Palo Alto Networks' enterprise security solutions. Acts as SME bridging security engineering and client-facing technical consultation.
Key Responsibilities
- Design, deploy, and optimize Palo Alto NGFW solutions in complex enterprise environments
- Provide L3/L4 escalation support for Palo Alto firewall, Prisma, and Cortex-related issues (PAN-OS)
- Architect and implement: Prisma Access (SASE/ZTNA), Prisma Cloud (CSPM, CWPP, CNAPP), Cortex XDR/XSOAR
- Advanced troubleshooting: traffic flow issues, security policy mismatches, VPN (IPSec/GlobalProtect), threat prevention, URL filtering, SSL decryption
- Lead end-to-end implementation projects (design, deployment, migration, optimization)
- Integrate Palo Alto solutions with SIEM/SOC platforms, IAM (SAML, Azure AD, Okta), and public cloud (AWS, Azure, GCP)
- Manage HA, clustering, and firewall upgrades
- Liaise with Palo Alto TAC for critical issue resolution
- Conduct security assessments, best practice reviews, and performance tuning
- Maintain technical documentation (HLDs/LLDs, SOPs, runbooks)
- Mentor L1/L2 engineers
- Participate in change management, maintenance windows, and incident response
Requirements
- Experience: 6–12 years in network and security engineering (min 6 years)
- Education: Bachelor's degree in Computer Science, Engineering, or related field
Process
- Interview Rounds: 2 Virtual + Final Face-to-Face
Senior Cloud Site Reliability Engineer (CSRE) – Azure
About Searce:
Searce is an AI-native, engineering-led modern technology consultancy that empowers
clients to futurify their businesses by delivering real, intelligent business outcomes. As a
trusted partner for over 3,000 clients globally, Searce specializes in cloud modernization,
data engineering, applied AI, and robust cloud platform security. Driven by a "HAPPIER"
cultural mindset and our proprietary evlos problem-solving framework, we eliminate
bureaucratic fluff to build working prototypes fast and scale enterprise production
environments intelligently. We don't just fix systems; we leverage multi-cloud technologies
to transform client operations into distinct competitive advantages.
Position Overview:
We are looking for a high-caliber Senior or Lead Cloud Site Reliability Engineer (CSRE) to
architect, secure, and stabilize next-generation hybrid and multi-cloud environments.
Operating at the intersection of infrastructure design, security compliance, and production
operations, you will serve as the technical Subject Matter Expert (SME) across GCP, Azure,
and AWS.
Whether optimizing a microservice mesh on GKE, tuning autoscaling on AKS, or driving a
massive disaster recovery drill across AWS regions, your focus will be absolute reliability. For
the Lead path, you will couple this deep engineering toolkit with stakeholder management
and mentorship to drive an elite operational culture.
Experience & Level Expectation:
Years of Experience: 3 to 10 years of intensive, hands-on production operations
experience in a dedicated DevOps, Cloud Platform Engineering, or SRE role.
Associate level (3-5 Years): Expected to show flawless execution of IaC, advanced
triaging of infrastructure failures, and ownership of the CI/CD and deployment
lifecycles.
Intermediate level (5-10 Years): Expected to take architectural ownership, serve as
primary Incident Commander for complex outages, design cross-cloud governance
frameworks, and act as a reliable bridge between technical teams and client
leadership.
Key Responsibilities & Role Expectations:
Multi-Cloud Platforms & Orchestration: Design, configure, and maintain
production-grade Kubernetes clusters across major platforms (AKS).
Manage advanced network routing, service meshes (e.g., Istio), and multi-tenant
isolation.
Infrastructure as Code (IaC) & GitOps: Build declarative, enterprise-grade, reusable
infrastructure components using Terraform or Crossplane. Standardize automated
environment provisioning to eliminate configuration drift across multi-branch
environments.
Incident Management & Reliability (SRE): Own and optimize the production on-call
rotation. Lead rapid mitigation strategies for Sev-1/Sev-2 system outages, reducing
Mean Time to Recovery (MTTR) through centralized log and metric correlation.
Root Cause Analysis (RCA): Facilitate rigorous, blameless post-incident reviews to
identify core architectural vulnerabilities and establish long-term fixes preventing
recurrence.
Lifecycle, Patching & Upgrades: Plan and execute zero-downtime cluster upgrades,
operating system patching strategies (Linux/Windows), database lifecycle updates,
and multi-region Disaster Recovery (DR) failover drills.
Core Core Operations & Legacy Integration: Manage enterprise-level hybrid
networking architecture (VPCs, Firewalls, Load Balancers, DNS routing, and DHCP
configurations) while effectively connecting cloud native services to legacy
infrastructures like Active Directory.
Security & Governance: Embed Zero Trust policies, secure secrets management
(Secrets Manager/Key Vault), and continuous vulnerability patching into the
automated SDLC pipeline.
Required Technical Skills:
- Microsoft Azure: Azure Virtual Machines, Virtual Networks, Azure Active Directory, Azure Update Management.
- Containers & Orchestration
- Production-level management of GKE, AKS, and EKS.
- Advanced mastery of Docker, Helm, Kubernetes StatefulSets, Pod Disruption
About Us
CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.
The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.
To know more, please visit https://cloudsufi.com
Our Values
We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.
Equal Opportunity Statement
CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/
Role : Full-Time Individual Contributor (IC)
Reporting to : Solution Architect / Program Manager
Location : India Remote (Quarterly visits to Noida office)
Shift : 2PM-11PM IST
12x5 (On call duty)
Experience : 8-14 Years
ABOUT YOU
- 5+ years’ experience with AWS orchestration via Terraform script
- 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
- 5+ years’ experience with AWS WAF
- 4+ years’ experience with CloudFlare
- 3+ years’ experience with DataDog
- Experience with PagerDuty
- Ability to make nuanced threat assessments
- Experience in SOPHOS.
- Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
- Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
- Hands-on experience implementing various security tools in CI/CD pipeline
- Strong experience with any cloud service provider (AWS Preferred)
- Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
- Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
- Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
- Penetration testing and container security.
- Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
- Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
- Creating and managing security strategies
- Oversee information security audits, whether performed by organization or third-party personnel
- Develop, maintain and publish up-to-date information security policies, standards and guidelines.
- Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)
ABOUT THE ROLE
- Work independently with vendors and collaborate with colleagues
- Experience negotiating remediation timelines and/or remediate found issues independently
- Ability to implement vendor platforms within CI/CD pipelines
- Experience managing/responding to incidents, collecting evidence, and making decisions.
- Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
- Multitasking and continuous ability to provide a high level of concentration for assigned projects.
- Good working knowledge of AWS security in general and familiarity of the AWS native security tools
- The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
- Ability to create DevSecOps security requirements while working on a project
- Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers
Amazon Web Services (AWS)DevOps & Cloud Security Specialist to architect enterprise-grade AWS networking, implement strict IAM security boundaries (HIPAA/GDPR compliance), automate infrastructure via IaC, and maintain crystal-clear technical documentation.
1. Primary Must-Have Competencies (Core Priorities)
A. AWS Networking & VPC Topology (Top Priority)
- Advanced VPC Architecture: Mastery in designing multi-VPC topologies, isolated subnets, custom Route Tables, NAT Gateways, Transit Gateways, and Cross-Region VPC Peering.
- Private Network Security: Extensive experience using VPC Endpoints (Gateway & Interface/PrivateLink) to keep internal AWS traffic completely off the public internet.
- Traffic Ingestion & Edge Security: Expertise in AWS WAF (custom rules, bot control, rate limiting), API Gateway throttling, ALB configuration, and Route 53 global routing.
B. AWS Security, IAM Architecture & Compliance
- Enterprise IAM Governance: Expertise in AWS Organizations, IAM Identity Center (SSO), Permission Boundaries, Service Control Policies (SCPs), and temporary role assumption across multi-account setups.
- Data Protection & Key Management: Deep knowledge of AWS KMS (customer-managed keys, envelope encryption at rest and in transit) and AWS Secrets Manager.
- Audit & Compliance: Setting up centralized logging pipelines (CloudTrail, GuardDuty, AWS Config, CloudWatch Audit Logs) for strict HIPAA/GDPR compliance.
C. Infrastructure as Code (IaC) & Containerization
- Terraform / AWS CDK: Must write production-grade, modular IaC templates from scratch—enforcing network topology and security guardrails directly in code.
- Container Orchestration: Hands-on setup and management of AWS ECS (Fargate) or EKS (Kubernetes) and automated CI/CD pipelines (GitHub Actions, GitLab CI).
D. Architecture Documentation & Systems Mapping
- Technical Documentation: Ability to author clean, standardized architecture diagrams (e.g., C4 model, Draw.io, Lucidchart) and maintain comprehensive runbooks, incident response plans, and compliance documentation.
2. Secondary Competency (Strong Advantage, Not Mandatory)
- Backend Software Development: Hands-on experience or a background in writing/debugging backend code in Node.js, Python, or Go.
- Note: The primary responsibility is cloud infrastructure, security, and automation. However, the ability to read backend code, debug API bottlenecks, or assist developers with microservice integrations is a major bonus.
Position: Technical Lead – Forcepoint (Data & Cloud Security)
Company: Inflow Technologies
Location: Bangalore
Work Mode: Work From Office | 5 days/week
Experience Required: Minimum 6 years
Interview Process: 2 rounds (Virtual + Final Face-to-Face)
About Inflow Technologies
Founded in 2005, Inflow is a value-added IT infrastructure distributor covering Networking, Cybersecurity, UC&C, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ'd in Bangalore with 20+ locations, backed by a 120+ certified technical team, and ~USD 700M+ annual run-rate revenue.
Position Overview
Acting as the Forcepoint subject matter expert, this role owns end-to-end design, deployment, and troubleshooting of enterprise data and cloud security architectures — spanning DLP, SWG, CASB, and SSE/ZTNA. The role sits at the intersection of solution architecture and hands-on L3 execution: defining security policies, configuring network proxies, and resolving complex support escalations in a client-facing, consultative capacity.
Core Products
- Forcepoint DLP (Endpoint, Network, Web, Email)
- Forcepoint Web Security
- Forcepoint Email Security
- Forcepoint CASB
- Forcepoint Suite / Forcepoint One
- Forcepoint Cloud Security / SSE (incl. ZTNA)
- Forcepoint DSPM
Key Responsibilities
1. Solution Design & Architecture
- Design enterprise architectures: DLP (Endpoint + Network + Discovery), Web Security (Proxy/Hybrid/Cloud), CASB & SaaS protection, Forcepoint Suite/One
- Install & configure Management Server, Policy Engine, Detection Servers, Protectors (Email/Web/Network), Endpoint agents (Windows/Mac)
- Implement EDM/IDM/OCR and data classification policies
2. Web Security (SWG)
- Deploy on-prem (V-series appliances) and cloud SWG/hybrid mode
- Configure transparent/explicit proxy, SSL inspection, URL filtering
3. Email Security
- Configure SMTP routing, DLP email policies, encryption & compliance rules
4. Advanced Policy Configuration
- Design/tune DLP policies (structured + unstructured data), web filtering (user/group/app-based), cloud app governance rules
5. L3 Troubleshooting & RCA (Critical)
- Handle: DLP not detecting over HTTPS, endpoint agent communication failures, web proxy latency/SSL failures, policy not applying to users, email DLP bypass
- Approach: log analysis (Policy Engine, endpoint, web), packet capture/traffic analysis, root cause identification & permanent fix
Qualifications & Certifications (Preferred)
- Bachelor's degree (IT/CS or related)
- Forcepoint Certified Administrator (FCA)
- Forcepoint DLP Specialist
- CCNA / Security+ (nice-to-have)
WowPe is a leading fintech company revolutionizing the way businesses handle financial transactions. Our suite of innovative products includes a secure Payment Gateway for seamless online transactions, robust Payouts solutions to streamline bulk payments, and a versatile Point of Sale (POS) system for efficient in-store transactions. At WowPe, we’re dedicated to providing user-friendly, scalable, and reliable solutions that empower businesses to grow and succeed in today’s fast-paced digital economy.
We are looking for a highly skilled Cloud Infrastructure & Cloud Network Engineer to design, build, and manage secure, scalable hybrid cloud environments at WowPe. This role will focus on cloud networking, hybrid connectivity, infrastructure automation, security, reliability, and performance across on-prem and cloud platforms (AWS/Azure). You will play a critical role in ensuring high availability, security, and performance of our fintech platforms.
A Day in the Life
- Design and review cloud network architectures (VPC/VNet, routing, segmentation)
- Troubleshoot latency, connectivity, VPN, and performance issues
- Work with DevOps and application teams to support deployments and scalability
- Automate infrastructure provisioning and security guardrails
- Monitor network health, traffic flow, and system performance
- Ensure security, compliance, and disaster recovery readiness
- Support hybrid connectivity between on-prem data centers and cloud environments.
Key Responsibilities
Cloud Networking & Hybrid Architecture
- Design and implement VPC/VNet architectures, subnetting, routing tables, NAT, gateways, and secure segmentation
- Build and manage hybrid connectivity between on-prem data centers and cloud using Site-to-Site VPN, ExpressRoute, Direct Connect
- Configure and manage Layer 4 & Layer 7 load balancers for high availability and traffic distribution
- Architect DNS, CDN, and edge networking strategies for low-latency global access
Security & Zero-Trust
- Implement Zero-Trust networking using security groups, NACLs, identity-aware proxies, mTLS
- Design secure access controls and network isolation
- Work closely with security teams to ensure PCI, ISO, SOC compliance readiness
Automation, Platform & Reliability
- Automate infrastructure provisioning using Infrastructure as Code (Terraform/ARM/CloudFormation)
- Build self-healing, auto-scaling architectures with health checks and fault tolerance
- Support and manage Kubernetes clusters (EKS/AKS) including networking and service communication
- Integrate infra with CI/CD pipelines for safe and frequent deployments
Operations & Observability
- Perform advanced troubleshooting for latency, packet loss, MTU, routing loops
- Implement and manage monitoring, logging, and observability (Prometheus, Grafana, ELK, Azure Monitor, CloudWatch)
- Design and maintain disaster recovery architectures, multi-region networking, and replication strategies
- Ensure high availability, performance optimization, and cost efficiency
Basic Qualifications & Skills
- 4+ years of experience in Cloud Infrastructure & Cloud Networking
- Strong hands-on experience with AWS and/or Azure
- Deep understanding of VPC/VNet, routing, NAT, gateways, load balancers, DNS
- Experience with Hybrid connectivity (VPN, ExpressRoute, Direct Connect)
- Solid knowledge of network security, firewalls, access control, segmentation
- Hands-on experience with Infrastructure as Code (Terraform preferred)
- Experience in monitoring, troubleshooting, and incident handling
- Strong understanding of high availability, DR, and performance optimization
Preferred Qualifications
- Experience in fintech, BFSI, or high-compliance environments
- Exposure to Zero-Trust architecture and security best practices
- Experience with Kubernetes (EKS/AKS), service mesh, microservices networking
- Familiarity with CI/CD pipelines and DevOps practices
- Knowledge of CDN, edge networking, and global traffic management
- Experience with compliance frameworks (PCI-DSS, ISO 27001, SOC2)
- Ability to design large-scale, resilient, production-grade architectures
Follow CutshortShubham Vishwakarma
Full Stack Developer - Averlon