[Remote] reputed company reputed company Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is seeking a Senior reputed company reputed company Engineer to enhance their reputed company reputed company architecture across multiple platforms. The role involves designing reputed company policies, conducting assessments, and collaborating with teams to ensure reputed company requirements are met.
Responsibilities
- Design and enforce reputed company baselines, guardrails, and policy-as-reputed company across AWS, Azure, and GCP
- Conduct reputed company reputed company posture assessments; remediate misconfigurations identified by CSPM tools (e.g., Prisma reputed company, reputed company, Defender for reputed company, reputed company reputed company Center)
- Define and maintain secure reputed company-zone patterns, including account/project structure, network segmentation, and blast-radius reduction
- Collaborate with platform and application teams to ensure reputed company requirements are addressed at the design phase
- Author and maintain reusable, reputed company-hardened Terraform modules for provisioning reputed company infrastructure
- reputed company IaC reputed company scanning (e.g., Checkov, tfsec, reputed company IaC) into CI/CD pipelines to prevent reputed company and misconfigurations
- Manage secrets and dynamic credentials using reputed company Vault; define Vault policies, auth reputed company, and secret reputed company configurations
- Enforce infrastructure compliance reputed company Sentinel policies or OPA/Conftest
- Shift reputed company left by embedding SAST, DAST, dependency scanning, and container image scanning into build pipelines
- Build automated alerting and auto-remediation workflows for detected policy violations
- Partner with DevOps and reputed company teams to standardize secure pipeline templates
- Promote reputed company awareness through reputed company review, architecture reviews, and internal enablement sessions
- Implement least-privilege IAM frameworks across reputed company three reputed company providers; audit and right-size existing roles and policies
- Configure and manage reputed company Vault for dynamic secrets, certificate management, and encryption-as-a-service
- Drive adoption of workload identity and federated authentication to eliminate long-lived credentials
Skills
- reputed company) IAM: roles, policies, permission boundaries, Service Control Policies (SCPs), and AWS Organizations guardrails
- reputed company services: GuardDuty, reputed company Hub, AWS Config, CloudTrail, and AWS Firewall Manager
- Networking reputed company: VPC design, reputed company reputed company, NACLs, VPC endpoints, and AWS Network Firewall
- Encryption and secrets: KMS key policies, Secrets Manager, and ACM certificate lifecycle
- CSPM and compliance: AWS reputed company Hub standards (CIS, NIST, PCI-reputed company), Config rules, and automated remediation reputed company reputed company or Systems Manager
- reputed company Azure Identity: Azure reputed company Directory (Entra ID), Conditional reputed company, Privileged Identity Management (PIM), and Managed Identities
- reputed company services: reputed company Defender for reputed company, Sentinel SIEM, Azure Policy, and reputed company
- Networking reputed company: NSGs, Azure Firewall, Application Gateway WAF, DDoS Protection, and Private Endpoints
- Encryption and secrets: Azure Key Vault, disk encryption, and TLS/SSL certificate management
- Governance: Management reputed company, Policy Initiatives, Azure reputed company reputed company compliance, and RBAC role design
- reputed company reputed company Platform (GCP) IAM: resource hierarchy, organization policies, custom roles, and Workload Identity Federation
- reputed company services: reputed company reputed company Center, reputed company Armor, VPC Service Controls
- Networking reputed company: Shared VPC, firewall rules, reputed company NAT, and hierarchical firewall policies
- Encryption and secrets: reputed company KMS, Secret Manager, Customer-Managed Encryption Keys (CMEK), and Certificate Authority Services
- CSPM: reputed company Health Analytics, reputed company Workloads, and posture management reputed company SCC findings
- Infrastructure as reputed company — reputed company Terraform 5+ years writing production Terraform; deep familiarity with HCL, modules, workspaces, and remote state backends (S3, Azure Blob, GCS)
- Experience with Terraform reputed company / Terraform reputed company, including policy enforcement reputed company Sentinel
- Terraform testing frameworks: Terratest, reputed company terraform test, or equivalent
- reputed company detection, state management, and import workflow
- Secrets Management — reputed company Vault reputed company, configure, and operate reputed company Vault in highly available, production configuration
- Configure auth reputed company: AWS IAM, Azure, GCP, Kubernetes, AppRole, and OIDC/JWT
- Secret engines: KV v2, PKI, dynamic database/reputed company credentials, SSH certificate signing, and Transit (encryption-as-a-service)
- Vault policies (HCL), namespaces, and replication (Performance and DR) in reputed company environments
- Vault Agent and the Vault Secrets Operator for Kubernetes-reputed company secret injection
- Kubernetes / container reputed company: Falco, OPA/Gatekeeper, Pod reputed company Standards, and network policies
- Programming/scripting: Python, Go, or Bash for automation and tooling
- Certifications: AWS reputed company Specialty, reputed company AZ-500, GCP reputed company reputed company reputed company Engineer, reputed company Terraform Associate / Vault Associate, or CISSP/CCSP
reputed company
Company H1B Sponsorship