Position : Cloud Engineer (Azure + Cloud Security)

Experience : 6 years

Job Location : Bangalore

Work Model : Hybrid - 2 to 3 Days Work from Office (Mandatory)

Notice Period : Immediate Joiners / Candidates who can join within 15 - 30 days preferred.

Candidate Preference : Only candidates currently residing in Bangalore and locally available for the Bangalore office will be considered.

Key Responsibilities :

- Remediate cloud security, vulnerability, and audit findings against agreed target - state configuration; track closure with evidence.

- Harden Azure storage, compute, networking, key management, and logging against defined baselines.

- Implement Azure Policy, tagging, governance guardrails, RBAC and privileged access controls; clean up legacy/orphaned resources.

- Build landing zone components to the defined architecture: subscription/resource group structure, spoke VNets, subnets, route tables, security groups, private endpoints, and private DNS.

- Configure hybrid connectivity including VPN Gateway, ExpressRoute, and peering; implement firewall rules aligned to documented business requirements and segmentation.

- Deploy infrastructure as code where practical using repeatable, automated builds.

- Assess migration candidates, documenting dependencies, connectivity, data flows, and constraints.

- Execute Azure migration waves covering build, data transfer, testing, cutover, rollback, and coordination with application, Windows, and Linux teams.

- Validate performance, resilience, backup, and monitoring before production acceptance; ensure security telemetry reaches SOC and decommission source infrastructure after approval.

- Produce as - built documentation and runbooks; follow formal change management, security standards, and MAS Technology Risk Management requirements.

- Provide structured knowledge transfer to the permanent team at agreed milestones.

Requirements :

- 6 years of hands - on Azure engineering experience, with proven migration or remediation delivery.

- Experience delivering against architectures defined by others, established standards, and formal change control.

- Operational Azure expertise across compute, storage, networking, Azure Policy, RBAC, and resource governance.

- Strong Azure networking experience: VNets, subnets, NSGs, route tables, private endpoints/DNS, VPN Gateway, and ExpressRoute.

- Identity and secrets management: Entra ID, RBAC, Privileged Identity Management, Key Vault, and managed identities.

- Infrastructure as code and automation using Terraform or Bicep, PowerShell, Azure CLI, and CI/CD pipelines.

- Migration tooling experience including Azure Migrate, Site Recovery, backup/replication, and dependency mapping.

- Operational tooling experience including Azure Monitor, Log Analytics, alerting, and cost visibility.

- Experience in regulated environments and working with least - privileged, time - bound access and strict data handling.

- Financial services experience is advantageous.

Must have skills :

- Azure Networking

- Infrastructure as Code development and maintenance

- Microsoft Azure

- Microsoft Entra ID

- Role - based Access Control (RBAC)