About this role
Job Description
Cloud Security Principal Engineer
Location: Hyderabad, India
Role Level: Principal Engineer / Principal Consultant
---
Role Summary
We are seeking an experienced Cloud Security Principal Engineer to lead the design, implementation, and governance of enterprise cloud security capabilities across multi-cloud environments. The individual will be responsible for defining cloud security architecture, driving cloud security transformation initiatives, implementing Zero Trust principles, and ensuring secure adoption of cloud technologies across the organization.
The role requires deep technical expertise in cloud platforms, cloud-native security controls, DevSecOps, infrastructure security, identity security, and regulatory compliance. The successful candidate will partner with cloud engineering, infrastructure, application, and cybersecurity teams to establish and maintain a secure cloud environment while enabling business innovation.
---
Key Responsibilities
Cloud Security Architecture & Engineering
- Define and maintain enterprise cloud security architecture standards and security guardrails.
- Design secure architectures for Azure, AWS, and other cloud platforms.
- Review cloud solutions for security, resilience, scalability, and compliance requirements.
- Develop reference architectures and secure design patterns for cloud workloads.
Cloud Security Operations
- Lead implementation and optimization of Cloud Security Posture Management (CSPM) solutions.
- Establish cloud monitoring, threat detection, and response capabilities.
- Define cloud security baselines and configuration standards.
- Drive continuous assessment and remediation of cloud security risks.
Identity & Zero Trust Security
- Implement Zero Trust architecture principles across cloud environments.
- Partner with IAM teams to strengthen identity governance and privileged access controls.
- Secure service accounts, machine identities, APIs, and cloud-native authentication mechanisms.
- Enhance cloud access controls using RBAC, Conditional Access, PIM, and MFA technologies.
DevSecOps & Cloud Native Security
- Integrate security controls into CI/CD pipelines.
- Implement Infrastructure-as-Code (IaC) security controls and validation processes.
- Establish security automation for containerized, serverless, and Kubernetes workloads.
- Embed threat modeling and security testing within cloud delivery processes.
Governance, Risk & Compliance
- Ensure alignment with HIPAA, HITRUST, SOC 2, NIST CSF, NIST 800-53, ISO 27001, and CIS Benchmarks.
- Lead cloud risk assessments and security reviews.
- Support audits, regulatory assessments, and compliance programs.
- Define and monitor cloud security KPIs, KRIs, and risk metrics.
Leadership & Stakeholder Management
- Act as technical leader and subject matter expert for cloud security.
- Mentor security engineers and cloud architects.
- Influence cloud security strategy and roadmap development.
- Present cloud security recommendations to senior leadership and executive stakeholders.
---
Required Qualifications
- Bachelor's or Master's degree in Computer Science, Information Security, Engineering, or related field.
- 10-12+ years of cybersecurity experience with at least 7+ years focused on cloud security.
- Strong hands-on expertise in Microsoft Azure and Amazon Web Services (AWS).
- Experience designing and securing enterprise-scale cloud environments.
- Deep understanding of cloud networking, cloud IAM, encryption, key management, and workload security.
- Experience implementing cloud security controls in highly regulated environments.
- Knowledge of container security, Kubernetes security, API security, and serverless security.
- Experience with threat modeling, security architecture reviews, and cloud risk assessments.
- Strong experience with security automation and cloud-native security tooling.