Cyber IAM Managed Service - Cloud Security Consultant

• We are looking for a of Cloud Security resource with 4+ years of experience for one of our engagements. The resource must work from our Nodia office and willing to work on shifts
• Work experience
• § We are looking for a of Cloud Security resource with 4+ years of experience for one of our engagements. The resource must work from our Nodia office and willing to work on shifts

The ideal candidate will

• Demonstrate solid understanding of cloud security architectures across AWS and Azure, with a strong grasp of Zero Trust principles and defense-in-depth strategies.
• Design secure cloud topologies, define security governance workflows, and guide risk-based access controls.
• Produce clear SOPs, runbooks, security assessment reports, and technical design documents for cloud environments.
• Collaborate with compliance, architecture, DevOps, and operations teams to ensure security by design.
• Drive continuous improvements via automation, Infrastructure as Code (IaC), and actionable security metrics.
• Effectively manage day-to-day security operations while balancing strategic initiatives and stakeholder expectations.
• Demonstrate ability to define, monitor, and drive SLA/KPI compliance across security operations, ensuring consistent and measurable service delivery.

Mandatory Certification Required

(At least one required; multiple strongly preferred)

Core Certifications

• AWS Certified Solutions Architect – Associate
• AZ-500 – Microsoft Certified Azure Security Engineer – Associate
• Wiz Certified Cloud Fundamentals

Preferred Advanced Certifications

• AWS Certified Security – Specialty
• Microsoft Certified: Cloud and AI Security Engineer Associate
• Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)

Technical Skills Required

Cloud Security

• Good working knowledge of AWS security services: IAM, Security Groups, NACLs, AWS Config, GuardDuty, Security Hub, CloudTrail, KMS, AWS WAF.
• Good working knowledge of Azure security services: Azure AD/Entra ID, NSGs, Azure Firewall, Microsoft Sentinel, Key Vault, Azure Policy, Defender for Cloud.
• Proven experience leading cloud security assurance programs, compliance audits, and governance frameworks across AWS and Azure.

Experience with CSPM tools (Wiz preferred; Prisma, Aqua Sec etc.) for posture management, automated compliance, and vulnerability remediation

Cloud Networking and Architecture

• Hands-on experience designing AWS VPC architectures: security groups, NACLs, transit gateways, VPC peering, PrivateLink, and Direct Connect.
• Proficiency with Azure Virtual Networks (VNets), NSGs, Azure Firewall, User-Defined Routes (UDRs), Application Gateway, and ExpressRoute.
• Understanding of hybrid cloud connectivity, micro-segmentation, and secure network architectures across AWS and Azure.
• Familiarity with Zero Trust architecture principles and cloud-native security design patterns.

Security Operations & Analytics

• Hands-on experience managing day-to-day cloud security operations including monitoring security alerts, triaging incidents, and coordinating remediation activities across AWS and Azure.
• Strong ability to perform security assessments, configuration reviews, and compliance checks within AWS and Azure environments.
• Experience investigating findings in cloud environments, conducting root cause analysis, and implementing preventive controls.
• Proficiency in reviewing and responding to security findings from CSPM tools (Wiz, Prisma Cloud, or similar) and ensuring timely resolution within defined SLAs.
• Experience working with ITSM/ticketing tools such as ServiceNow to log, track, prioritize, and close security incidents and service requests in line with defined SLAs and KPIs.

DevSecOps & Automation

• Familiarity with Infrastructure as Code (Terraform, CloudFormation, ARM templates) and integrating security controls into IaC pipelines.
• Understanding of CI/CD security integration, container security (Docker, Kubernetes), and API security.

• Experience with automation scripting (Python, PowerShell, Lambda, or Azure Functions) to support and improve security operations
• Behavioral / team skills
• § • Strong communication and stakeholder management skills, including ability to explain complex security concepts in simple terms.

• Analytical mindset with strong problem‑solving and decision‑making skills.
• High level of ownership, accountability, and attention to detail.
• Ability to handle multiple priorities in fast‑paced cloud and security environments.
• Collaborative mindset with a willingness to mentor junior team members.
• Proactive, structured, and self-driven approach to work.
• Strong documentation and presentation abilities.

• Work experience
• § We are looking for a of Cloud Security resource with 4+ years of experience for one of our engagements. The resource must work from our Nodia office and willing to work on shifts

The ideal candidate will

• Demonstrate solid understanding of cloud security architectures across AWS and Azure, with a strong grasp of Zero Trust principles and defense-in-depth strategies.
• Design secure cloud topologies, define security governance workflows, and guide risk-based access controls.
• Produce clear SOPs, runbooks, security assessment reports, and technical design documents for cloud environments.
• Collaborate with compliance, architecture, DevOps, and operations teams to ensure security by design.
• Drive continuous improvements via automation, Infrastructure as Code (IaC), and actionable security metrics.
• Effectively manage day-to-day security operations while balancing strategic initiatives and stakeholder expectations.
• Demonstrate ability to define, monitor, and drive SLA/KPI compliance across security operations, ensuring consistent and measurable service delivery.

Mandatory Certification Required

(At least one required; multiple strongly preferred)

Core Certifications

• AWS Certified Solutions Architect – Associate
• AZ-500 – Microsoft Certified Azure Security Engineer – Associate
• Wiz Certified Cloud Fundamentals

Preferred Advanced Certifications

• AWS Certified Security – Specialty
• Microsoft Certified: Cloud and AI Security Engineer Associate
• Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)

Technical Skills Required

Cloud Security

• Good working knowledge of AWS security services: IAM, Security Groups, NACLs, AWS Config, GuardDuty, Security Hub, CloudTrail, KMS, AWS WAF.
• Good working knowledge of Azure security services: Azure AD/Entra ID, NSGs, Azure Firewall, Microsoft Sentinel, Key Vault, Azure Policy, Defender for Cloud.
• Proven experience leading cloud security assurance programs, compliance audits, and governance frameworks across AWS and Azure.

Experience with CSPM tools (Wiz preferred; Prisma, Aqua Sec etc.) for posture management, automated compliance, and vulnerability remediation

Cloud Networking and Architecture

• Hands-on experience designing AWS VPC architectures: security groups, NACLs, transit gateways, VPC peering, PrivateLink, and Direct Connect.
• Proficiency with Azure Virtual Networks (VNets), NSGs, Azure Firewall, User-Defined Routes (UDRs), Application Gateway, and ExpressRoute.
• Understanding of hybrid cloud connectivity, micro-segmentation, and secure network architectures across AWS and Azure.
• Familiarity with Zero Trust architecture principles and cloud-native security design patterns.

Security Operations & Analytics

• Hands-on experience managing day-to-day cloud security operations including monitoring security alerts, triaging incidents, and coordinating remediation activities across AWS and Azure.
• Strong ability to perform security assessments, configuration reviews, and compliance checks within AWS and Azure environments.
• Experience investigating findings in cloud environments, conducting root cause analysis, and implementing preventive controls.
• Proficiency in reviewing and responding to security findings from CSPM tools (Wiz, Prisma Cloud, or similar) and ensuring timely resolution within defined SLAs.
• Experience working with ITSM/ticketing tools such as ServiceNow to log, track, prioritize, and close security incidents and service requests in line with defined SLAs and KPIs.

DevSecOps & Automation

• Familiarity with Infrastructure as Code (Terraform, CloudFormation, ARM templates) and integrating security controls into IaC pipelines.
• Understanding of CI/CD security integration, container security (Docker, Kubernetes), and API security.

• Experience with automation scripting (Python, PowerShell, Lambda, or Azure Functions) to support and improve security operations
• Behavioral / team skills
• § • Strong communication and stakeholder management skills, including ability to explain complex security concepts in simple terms.

• Analytical mindset with strong problem‑solving and decision‑making skills.
• High level of ownership, accountability, and attention to detail.
• Ability to handle multiple priorities in fast‑paced cloud and security environments.
• Collaborative mindset with a willingness to mentor junior team members.
• Proactive, structured, and self-driven approach to work.
• Strong documentation and presentation abilities.