IAM -Security Engineer

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

website: www.glansolutions.com

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

Job Title : Senior AWS DevSecOps & AI Platform Engineer

Experience Required : 5+ Years in AWS / Cloud Engineering

Terraform Experience : 4+ Years

Location : Gurugram

Work Mode : Onsite

Employment Type : Full-time

About the Role :

We are looking for an experienced Senior AWS DevSecOps & AI Platform Engineer with strong expertise in AWS cloud infrastructure, Kubernetes, Infrastructure as Code (IaC), CI/CD automation, cloud security, and database administration.

The ideal candidate will be responsible for designing and maintaining secure, scalable, reliable, and cost-efficient cloud environments while supporting microservices-based applications and implementing DevSecOps best practices. The role also involves building and deploying AI agents using Amazon Bedrock and Bedrock AgentCore, along with managing enterprise development and collaboration tools.

Mandatory Skills :

AWS (EC2, EKS, ECS, Lambda, S3, CloudWatch), Kubernetes, Terraform, Jenkins, Bitbucket Pipelines, CI/CD, DevSecOps, AWS Security Services (IAM, WAF, GuardDuty, Security Hub, KMS, Secrets Manager), Microservices, Helm, PostgreSQL, Oracle SQL, RDS, Jira, Confluence, Amazon Bedrock, Bedrock AgentCore, AWS Networking, and Cloud Cost Optimization.

Key Responsibilities :

• AWS Cloud Infrastructure : Design, implement, and maintain AWS infrastructure with a focus on scalability, availability, security, reliability, and cost optimization.
• Microservices & Containerization : Manage and support distributed microservices architectures, including deployment, monitoring, troubleshooting, performance optimization, service meshes, and API gateways.
• Kubernetes Administration : Administer and optimize Kubernetes clusters, including Amazon EKS and self-managed environments, covering upgrades, networking, workload management, scaling, and resource optimization.
• Cloud Security & Compliance : Implement and manage AWS security services, including IAM, GuardDuty, Security Hub, WAF, KMS, Secrets Manager, AWS Config, and CloudTrail.
• DevSecOps Implementation : Integrate security testing, vulnerability scanning, container security, and compliance-as-code tools into CI/CD pipelines.
• CI/CD & Source Control : Manage Bitbucket repositories, branching strategies, permissions, and Bitbucket Pipelines. Build and optimize Jenkins pipelines using declarative and scripted approaches.
• Infrastructure as Code : Develop and maintain Terraform modules, manage remote state and workspaces, detect infrastructure drift, and implement reusable infrastructure provisioning practices.
• Database Administration : Provision, manage, secure, and optimize AWS RDS databases, particularly PostgreSQL and Oracle, including backups, replication, patching, performance tuning, and migrations.
• Jira & Confluence Administration : Manage projects, workflows, automation rules, permissions, user access, spaces, schemes, and plugins.
• Monitoring & Reliability : Define and monitor SLIs, SLOs, and SLAs; implement observability best practices; and participate in incident management, root cause analysis, and post-incident reviews.
• AI Agent Development : Design, build, and deploy AI agents using Amazon Bedrock and Bedrock AgentCore, including agent runtime, memory, tools, gateway integration, identity and access management, guardrails, and lifecycle management across environments.
• Cloud Connectivity : Support hybrid cloud connectivity using AWS Direct Connect, VPN, and Transit Gateway.
• Cost Optimization : Apply FinOps practices to monitor cloud expenditure, optimize resource utilization, and improve infrastructure efficiency.
• API Integrations : Integrate third-party APIs while implementing authentication, rate limiting, error handling, and webhook management.

Required Skills & Qualifications :

• 5+ years of hands-on experience with AWS cloud services, including EC2, ECS, EKS, Lambda, ALB, CDN, S3, CloudWatch, Amazon Bedrock, and Bedrock AgentCore.
• Strong understanding of AWS networking, multi-account strategies, landing zone architecture, and hybrid connectivity.
• 4+ years of practical experience with Terraform, including module development, remote state management, workspaces, drift detection, and state operations.
• Extensive experience administering Kubernetes, preferably Amazon EKS, including Helm, Kustomize, operators, RBAC, network policies, autoscaling, and multi-tenancy.
• Proven experience managing distributed microservices, service meshes, API gateways, and inter-service communication.
• Strong knowledge of AWS security services, including IAM, Service Control Policies (SCPs), WAF, KMS, Secrets Manager, AWS Config, and CloudTrail.
• Experience implementing least-privilege access, zero-trust principles, and cloud security compliance controls.
• Hands-on experience integrating DevSecOps tools such as Snyk, Trivy, Checkov, and SonarQube into CI/CD pipelines.
• Understanding of OWASP security principles, CIS benchmarks, vulnerability management, and container security.
• Proficiency in Bitbucket repository administration, branch permissions, and YAML-based Bitbucket Pipelines.
• Strong experience developing and maintaining Jenkins CI/CD pipelines, shared libraries, plugins, and build agents.
• Experience administering AWS RDS databases, particularly PostgreSQL and Oracle SQL, including backup, replication, performance tuning, and migration activities.
• Experience administering Jira and Confluence, including workflows, permissions, automation, and plugin management.
• Working knowledge of Azure services, particularly Web Apps and Logic Apps/Workflows.
• Practical experience with Amazon Bedrock, including model invocation, guardrails, and AI agent development and deployment using Bedrock AgentCore.
• Understanding of third-party API integration, authentication mechanisms, rate limiting, error handling, and webhook management.
• Familiarity with FinOps practices and cloud cost optimization.

Good-to-Have Skills :

• Additional Azure experience, including networking, Azure SQL Managed Instance, and Azure Kubernetes Service (AKS).
• Hands-on experience with AI-driven Development Lifecycle (AI-DLC) methodologies and tools such as Kiro.

Relevant certifications, such as :

• AWS Certified Solutions Architect
• AWS Certified DevOps Engineer – Professional
• AWS Machine Learning or Generative AI certifications
• Certified Kubernetes Administrator (CKA)
• HashiCorp Terraform certifications

Ideal Candidate Profile :

The ideal candidate is a hands-on cloud and DevSecOps professional who can manage enterprise-scale AWS infrastructure, automate deployments, strengthen security controls, troubleshoot complex distributed systems, and support AI agent development. Strong problem-solving skills, an automation-first mindset, and the ability to collaborate across development, security, and infrastructure teams are essential.

We are looking for a hands-on Senior AWS Cloud Engineer to lead the infrastructure build, optimization, automation, and production deployment of a Multi-Agent AI Chatbot Platform hosted on AWS. The development environment is already in place, and the successful candidate will drive the solution through testing, integrations, and production go-live.

Key Responsibilities

• Review, validate, and optimize existing Terraform code and AWS infrastructure.
• Establish and manage integrations with enterprise platforms such as ServiceNow, Workday, and other third-party systems.
• Design, build, and support secure, scalable, and highly available AWS environments.
• Implement and automate CI/CD pipelines and Infrastructure-as-Code practices.
• Lead infrastructure testing, performance tuning, and production readiness activities.
• Drive deployment and operationalization of the platform in the Production environment.
• Implement cloud governance, security, monitoring, and FinOps best practices.
• Troubleshoot and resolve complex cloud infrastructure issues.

Required Skills & Experience

• 10+ years of IT experience with strong expertise in AWS Cloud Engineering.
• Proven experience designing, deploying, and managing AWS production environments.
• Strong hands-on experience with Terraform and Infrastructure-as-Code.
• Experience with CI/CD pipeline automation and DevOps practices.
• Expertise in AWS services including VPC, IAM, EC2, S3, Lambda, CloudWatch, and networking.
• Experience in performance optimization, reliability, and cloud cost management (FinOps).
• Strong scripting and automation skills.
• Experience integrating enterprise applications through APIs and secure connectivity patterns.

We are seeking a highly skilled Senior DevOps Engineer with 8+ years of professional experience to join our team. In this role, you will design, implement, and optimize cloud infrastructure and CI/CD processes.

You will collaborate closely with development, QA, and operations teams to deliver scalable, secure, automated, and reliable solutions on AWS.

The ideal candidate will have strong hands-on experience with AWS, Terraform, Git/GitHub, Jenkins, PowerShell, Python, AWS Systems Manager (SSM) Documents, and Active Directory (AD) administration, along with a passion for automation, efficiency, and operational excellence.

Key Responsibilities

• Design, build, and maintain scalable cloud infrastructure on AWS.
• Develop and manage Infrastructure as Code (IaC) using Terraform.
• Build, maintain, and optimize CI/CD pipelines using Jenkins and GitHub.
• Use AWS Systems Manager (SSM) to support operational automation and system administration.
• Automate system tasks and administrative workflows using PowerShell and other scripting languages.
• Create, maintain, and execute custom SSM Documents for configuration management, patching, automation, and troubleshooting.
• Manage and administer Active Directory (AD), including users, groups, permissions, policies, authentication, and integration with AWS services.
• Implement and manage version-control workflows in Git and GitHub.
• Ensure infrastructure and deployment processes follow best practices for security, reliability, scalability, and cost optimization.
• Monitor and troubleshoot production systems to ensure high availability, performance, and reliability.
• Collaborate with development teams to improve software delivery processes and release management.
• Mentor junior engineers and contribute to the development of DevOps standards and best practices.

Required Skills and Experience

• 8+ years of professional experience, including at least 4 years in DevOps or Site Reliability Engineering (SRE) roles.
• Strong hands-on experience with AWS services, including EC2, VPC, IAM, S3, EKS, Lambda, and related services.
• Proven expertise in Terraform for Infrastructure as Code.
• Experience administering both Linux and Windows operating systems.
• Experience designing and managing CI/CD pipelines using Jenkins and GitHub.
• Proficiency with Git workflows and source-code management best practices.
• Strong PowerShell scripting skills; familiarity with Python and/or Bash is a plus.
• Experience with AWS Systems Manager (SSM), including creating and managing SSM Documents.
• Hands-on experience managing Active Directory, including users, groups, policies, authentication, permissions, and AWS integration.
• Solid understanding of cloud networking, security, monitoring, and troubleshooting.
• Excellent problem-solving, communication, collaboration, and decision-making skills.

Nice-to-Have Skills

• Experience with containerization and orchestration technologies, such as Docker, Kubernetes, and Amazon EKS.
• Knowledge of monitoring and observability tools, such as Amazon CloudWatch, New Relic, and Sumo Logic.
• An AWS certification, such as AWS Certified DevOps Engineer – Professional or AWS Certified Solutions Architect.

Who You Are

• You are eager to learn new technologies and continuously improve your skills.
• You make sound decisions and take ownership of your work.
• You are proactive, self-motivated, and comfortable taking initiative.
• You are a strong communicator who enjoys collaborating with cross-functional teams.
• You are committed to improving processes, automation, reliability, and operational efficiency.

Key Responsibilities

·       System Design: Design secure, scalable, and highly available multi-tenant cloud-based application architectures.

·       Integration Strategy: Build robust APIs, webhooks, and data pipelines for complex enterprise client connections.

·       Technical Guidance: Mentor software engineers and lead critical code and architecture reviews to ensure engineering excellence.

·       Performance & Security: Drive non-functional infrastructure needs including high uptime, strict data privacy compliance, and fast application response times.

·       Cross-Functional Collaboration: Partner closely with Product, Security, and Customer Success teams to align technical execution with business roadmaps.

Required Qualifications

·       Experience: 8+ years of experience in software engineering with at least 3+ years operating as a technical or solutions architect within a B2B SaaS environment.

·       Cloud & DevOps: Deep production knowledge of major cloud infrastructure (AWS, GCP, or Azure), containerization technologies (Docker, Kubernetes), and modern CI/CD automation pipelines.

·       Architecture Patterns: Proven expertise designing microservices, event-driven architectures, and high-performance relational and NoSQL database structures.

·       Communication: Strong written and verbal communication skills, with a proven ability to translate complex technical concepts clearly to both engineers and business stakeholders.

·       Education: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent practical work experience).

Preferred Skills

·        Prior experience managing architectural frameworks for enterprise compliance frameworks like SOC2, ISO 27001, or GDPR.

·        Background in building real-time data processing engines, stream frameworks, or integrating enterprise AI/ML components.

We are looking for a hands-on Senior AWS Cloud Engineer to lead the infrastructure build, optimization, automation, and production deployment of a Multi-Agent AI Chatbot Platform hosted on AWS. The development environment is already in place, and the successful candidate will drive the solution through testing, integrations, and production go-live.

Key Responsibilities

• Review, validate, and optimize existing Terraform code and AWS infrastructure.
• Establish and manage integrations with enterprise platforms such as ServiceNow, Workday, and other third-party systems.
• Design, build, and support secure, scalable, and highly available AWS environments.
• Implement and automate CI/CD pipelines and Infrastructure-as-Code practices.
• Lead infrastructure testing, performance tuning, and production readiness activities.
• Drive deployment and operationalization of the platform in the Production environment.
• Implement cloud governance, security, monitoring, and FinOps best practices.
• Troubleshoot and resolve complex cloud infrastructure issues.

Required Skills & Experience

• 10+ years of IT experience with strong expertise in AWS Cloud Engineering.
• Proven experience designing, deploying, and managing AWS production environments.
• Strong hands-on experience with Terraform and Infrastructure-as-Code.
• Experience with CI/CD pipeline automation and DevOps practices.
• Expertise in AWS services including VPC, IAM, EC2, S3, Lambda, CloudWatch, and networking.
• Experience in performance optimization, reliability, and cloud cost management (FinOps).
• Strong scripting and automation skills.
• Experience integrating enterprise applications through APIs and secure connectivity patterns.

Preferred Skills

• Experience supporting AI/GenAI, chatbot, or multi-agent platforms.
• AWS Certifications (Associate/Professional).
• Banking or Financial Services domain experience.

Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).

3+ years of hands-on experience with Microsoft Azure, including IaaS, PaaS, networking, identity (Entra ID), and governance services.

2+ years of experience with DevOps tooling and practices, including CI/CD pipelines (Azure DevOps or GitHub Actions), Infrastructure as Code (Terraform, Bicep, or ARM), and version control (Git).

2+ years' experience in infrastructure design, platform engineering, or architecture.

Strong proficiency with automation and scripting — PowerShell, Azure CLI, Python, or Bash.

Solid understanding of containerisation (Docker) and familiarity with orchestration platforms (Azure Kubernetes Service).

Deep understanding of cloud architecture, deployment patterns, and management best practices, including the Azure Well-Architected Framework.

Experience defining standards, governance frameworks, and reference architectures for cloud platform consumption.

Strong knowledge of networking concepts, storage configurations, virtualisation technologies, and disaster recovery/backup design for hybrid environments.

Experience with Azure DevOps (Repos, Pipelines, Boards, Artifacts) or equivalent platforms.

Familiarity with identity and access management (IAM), including Entra ID, RBAC, PIM.

Strong understanding of security, compliance requirements, and IT governance frameworks (ITIL, COBIT, or similar).

Preferred

Job Title: AppSec / AI Security Engineer

Employment Type: Full-time/ Permanent

Location: Indore (Work from Office)

About the Role

We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.

If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

Key Responsibilities

• Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
• Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
• Develop structured code review workflows incorporating specifications, scan results, and code provenance.
• Optimize security scanning tools to reduce false positives and drive developer adoption.
• Investigate and manage security findings using established remediation and documentation processes.
• Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
• Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.

Required Skills & Experience

• Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
• Experience implementing automated security scanning and enforcement — not just operating existing tools.
• Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
• Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
• Ability to design, build, and own security automation and governance solutions from the ground up.
• Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
• Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
• Strong analytical mindset and ability to independently assess security risk across internal and external codebases.

Preferred Qualifications

• ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
• Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
• Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
• AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
• Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
• Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).

About Company:

Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.

For more info, please visit our website:  https://5exceptions.com

Role Overview

• Role: Senior DevOps / CloudOps Engineer
• Domain: IoT Smart Controls & Building Management Systems (BMS) Platform
• Environment: Scale-Up product ecosystem demanding Startup Agility

Key Responsibilities

• Cloud & Infrastructure Management: Design, provision, and maintain secure, highly available cloud infrastructure (AWS/Azure/GCP) with application of Infrastructure as Code capabilities(Terraform/Ansible)
• IoT & Real-Time Messaging Scalability: Manage high-throughput MQTT broker clusters and WebSocket communication layers to support massive concurrent device telemetry
• CI/CD Pipeline Operations: Build and optimize automated build, test, and deployment pipelines for heterogeneous micro-services spanning Java Spring Boot backends, PHP services, and containerized components.
• Container Orchestration: Manage Docker containers and Kubernetes clusters ensuring seamless micro-services orchestration, zero-downtime rollouts, and failover resilience.
• Monitoring & Observability: Implement comprehensive logging, tracing, and metric alerts (Prometheus, Grafana, ELK stack) across cloud components and edge-to-cloud communication paths.
• Cross-Functional Collaboration: Coordinate with firmware teams (C/C++) and mobile/web application teams (React Native, JavaScript, Android, iOS) to ensure smooth continuous integration and API gateway reliability

Required Skills & Qualifications

• Experience: 8+ years of hands-on cloud engineering and DevOps experience in production environments.
• Cloud & IaC: Deep proficiency in cloud platform administration (AWS/Azure) alongside Terraform.
• Networking & Protocols: Solid understanding of TCP/IP, DNS, load balancing, WebSockets, and MQTT broker scaling (e.g., EMQX, HiveMQ, or Mosquitto).
• Containerization Stack: Working knowledge of Docker, Kubernetes, and Helm charts.
• Scripting & Automation: Good scripting fundamentals in Python, Bash
• Tech Stack Familiarity: Operational awareness of Java Spring Boot, PHP, and JavaScript ecosystems to debug deployment bottlenecks and assist engineering teams.