Principal Security Engineer Cloud and Infrastructure Security

<h3>Accountabilities</h3><li>Own and evolve cloud security architecture across Azure and AWS, including tenant, subscription and account structures, network segmentation, private connectivity, traffic controls, egress policies, and workload isolation.</li><li>Assess infrastructure and product environments against real-world security, regulatory, and certification requirements, identifying architectural risks before they become production constraints.</li><li>Establish secure-by-default infrastructure patterns, hardened modules, cloud landing zones, account baselines, and reusable security controls within infrastructure-as-code practices.</li><li>Extend policy-as-code throughout development and deployment pipelines, enabling security feedback and enforcement earlier in the engineering lifecycle.</li><li>Own hardened virtual machine and container image pipelines, including image construction, patching, provenance, signing, lifecycle automation, and ongoing maintenance.</li><li>Define secure architectures and defaults for container orchestration platforms, including Kubernetes environments and deployment configurations inherited by customers.</li><li>Establish security architecture for AI workloads and AI-enabled development tooling, covering model and inference exposure, data boundaries, residency, identities, secrets, and appropriate guardrails.</li><li>Lead infrastructure vulnerability and exposure management from discovery and risk prioritization through ownership, remediation, and verification.</li><li>Develop a unified approach to cloud posture and workload protection across Azure and AWS, including security coverage standards and remediation workflows.</li><li>Determine where automation and agentic workflows should act autonomously versus provide recommendations, ensuring appropriate validation and safeguards.</li><li>Build security workflows that produce actionable pull requests, automated fixes, or clearly owned remediation paths rather than relying solely on manual ticket management.</li><li>Design cloud, configuration, and network controls so that compliance evidence can be generated efficiently through queries and automation.</li><li>Partner closely with engineering teams to influence architectural decisions early and ensure security controls are practical, scalable, and consistently adopted.</li><li>Provide senior technical leadership on infrastructure security strategy and help establish the security engineering standards for a growing organization.</li><h2>Requirements</h2><li>10+ years of experience in security engineering or infrastructure engineering, including substantial experience in cloud architecture; equivalent depth of experience will be considered.</li><li>Deep hands-on cloud security architecture experience across Azure and AWS, with significant expertise in at least one cloud and strong working knowledge of the other.</li><li>Recent hands-on experience securing AI workloads or AI-enabled security/development tooling, preferably within the last six months.</li><li>Demonstrated ability to build security solutions, frameworks, or engineering capabilities that development or infrastructure teams successfully adopted and continued using.</li><li>Strong infrastructure-as-code experience and the ability to improve mature engineering practices through secure modules, reusable patterns, and automation.</li><li>Strong understanding of cloud network security, including segmentation, private connectivity, egress controls, east-west traffic, and workload isolation.</li><li>Experience with container and Kubernetes security, image hardening, software supply-chain integrity, and secrets management.</li><li>Knowledge of policy-as-code frameworks and experience determining the appropriate points for security enforcement throughout the software lifecycle.</li><li>Experience designing security controls that have successfully supported formal audits or compliance requirements.</li><li>Strong understanding of infrastructure vulnerability management, cloud security posture management, workload protection, and remediation processes.</li><li>Experience with security automation and sound judgment around where autonomous workflows can safely operate and where human approval is required.</li><li>Ability to balance technical risk, business priorities, regulatory requirements, and practical engineering constraints.</li><li>Strong communication and collaboration skills, with the ability to influence senior engineers, architects, and cross-functional stakeholders.</li><li>Experience with customer-deployed software, FedRAMP or IRAP environments, large-scale cloud migrations, or major infrastructure transformations is advantageous.</li><li>Experience with ISO 27001, SOC 2, PCI, or similar security and compliance frameworks is beneficial.</li><li>Bachelor's degree in computer science, information security, engineering, or a related technical discipline is preferred.</li><h2>Benefits</h2><li>Senior principal-level technical ownership with the opportunity to shape an infrastructure security program from the ground up.</li><li>Remote working opportunity based in India.</li><li>Direct visibility with security and engineering leadership.</li><li>Opportunity to influence engineering standards, cloud architecture, automation, and secure-by-default practices at scale.</li><li>Exposure to Azure, AWS, Kubernetes, infrastructure-as-code, AI security, vulnerability management, and modern security automation.</li><li>Opportunity to work on security initiatives that support certifications, regulatory compliance, customer trust, and market expansion.</li><li>Globally distributed and collaborative working environment.</li><li>Strong emphasis on innovation, professional development, health and wellbeing, and career growth.</li><li>Equal-opportunity workplace committed to an inclusive and respectful environment.</li>