Senior Security Engineer – Cloud & Infrastructure

The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers.

Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.Your career with us should reflect your energy and passion.

That’s why, at Apex Group, we will do more than simply ‘empower’ you. We will work to supercharge your unique skills and experience.

Take the lead and we’ll give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities.

For our business, for clients, and for you

APEX FUND SERVICES IS CURRENTLY HIRING

Corporate Title: SeniorSecurity Engineer - Cloud & Infrastructure

Location: India, Pune Baner

About Apex

The Apex Group is a global financial services provider with over 10,000 staff across 50+ offices worldwide. At Apex, every employee contributes to our success. As we continue to grow, we seek bright, motivated individuals who thrive on challenges and want to be part of a dynamic, global team.

The Role

As a Senior Security Engineer - Cloud & Infrastructure, you will be responsible for designing, implementing, and managing security controls across Apex's global cloud and infrastructure environments. The role spans cloud security, network security, identity and access management, endpoint protection, and infrastructure security, with a strong focus on enabling the secure integration of acquired companies, platforms, applications, and infrastructure into the Apex ecosystem. You will work closely with infrastructure, architecture, engineering, and M&A teams to ensure security is embedded throughout the technology lifecycle.

Key Responsibilities

• Deploy, configure, and manage security solutions across cloud (AWS, Azure, OCI) and on-premises infrastructure.
• Implement and maintain controls for network security, IAM, endpoint protection, and cloud governance.
• Support the secure design and integration of hybrid, multi-cloud, and acquired-company environments.
• Conduct security assessments, vulnerability analysis, configuration reviews, and remediation across cloud, infrastructure, and newly acquired technology assets.
• Collaborate with platform, infrastructure, and application teams to embed security into solutions from design to operation.
• Monitor for and respond to security incidents affecting cloud and infrastructure services.
• Maintain documentation including architecture diagrams, security control mappings, and operational procedures.
• Research and recommend new technologies, tools, and practices to enhance security posture.
• Ensure compliance with relevant frameworks and internal security standards, including NIST, ISO 27001, CSA CCM, and applicable regulatory expectations.
• Lead security assessments and integration planning for mergers and acquisitions, including cloud platforms, infrastructure, identity, network connectivity, endpoint controls, and third-party integrations.
• Drive remediation of inherited security risks identified during acquisition due diligence, onboarding, or post-integration reviews.
• Partner with infrastructure, cloud, IAM, application, architecture, and risk teams to define secure integration patterns and operational handover requirements.

Areas of Focus

• Deploy, configure, and manage security controls for AWS, Azure, and OCI environments.
• Implement cloud-native security controls including Security Groups, IAM policies, KMS, and encryption.
• Integrate and manage CSPM and CWPP tools to monitor and enforce cloud security posture.
• Enforce least privilege and Zero Trust principles across cloud accounts and subscriptions.
• Lead security due diligence, integration planning, and security control implementation for mergers and acquisitions, including system onboarding, identity consolidation, network integration, cloud migrations, third-party connectivity, and remediation of inherited risks.
• Define secure integration patterns for acquired companies, including segmentation, privileged access, logging, monitoring, endpoint security, and data protection controls.
• Support secure connectivity between Apex-managed endpoints, acquired-company environments, data centres, cloud platforms, and business-critical applications.
• Contribute to security architecture reviews for infrastructure changes, migrations, and transformation initiatives.
• Implement and manage Microsoft 365 security baselines, Conditional Access, and Intune compliance.
• Harden operating systems, containers, and virtual machines following best practices.
• Design and maintain secure network architectures for hybrid and multi-cloud connectivity.
• Configure firewalls, WAFs, VPN gateways, and implement network segmentation.
• Deploy intrusion prevention/detection (IPS/IDS) and network monitoring solutions.
• Support DDoS protection strategies and integrate with cloud provider capabilities.
• Conduct patching, vulnerability scanning, and secure configuration audits.
• Manage identity federation, SSO, MFA, and enforce strong authentication policies.
• Investigate and respond to incidents affecting cloud workloads, networks, or infrastructure.
• Map cloud and infrastructure security controls to frameworks such as NIST CSF, ISO 27001, and CSA CCM.
• Maintain asset inventory and ensure continuous compliance with corporate security standards.
• Research and recommend new security tools, services, and best practices to strengthen defenses.

Required Experience & Skills

• 7+ years of experience in cybersecurity, cloud, infrastructure, or security engineering roles, with proven hands-on experience securing enterprise cloud and infrastructure environments.
• Proven hands-on experience with AWS, Azure, and/or OCI security controls, including identity, networking, encryption, logging, monitoring, and secure configuration.
• Strong knowledge of network security, IAM, endpoint protection, and vulnerability management.
• Familiarity with Kubernetes, CI/CD security, and cloud automation (Terraform, Ansible, etc.).
• Understanding security frameworks and control models such as NIST, ISO 27001, CSA CCM, CIS Benchmarks, and MITRE ATT&CK.
• Ability to troubleshoot and resolve security incidents in complex environments.
• Strong communication skills to work effectively with both technical and non-technical stakeholders.
• Relevant certifications such as CCSP, CISSP, AWS/Azure Security Engineer, or equivalent are advantageous.
• Experience supporting mergers and acquisitions, technology integrations, cloud migrations, or large-scale infrastructure transformation initiatives is highly desirable.
• Strong understanding of Zero Trust, least privilege, privileged access management, conditional access, MFA, SSO, and identity federation concepts.
• Experience with CSPM, CWPP, SIEM, EDR/XDR, vulnerability management, firewall, WAF, VPN, and network segmentation technologies.
• Ability to translate technical security risks into clear business impact, remediation actions, and practical implementation plans.
• Experience documenting security designs, control mappings, operational procedures, and integration decisions for audit and governance purposes.

What will you get in return:

• Opportunity to work with senior security professionals across multiple global teams.
• Exposure to cutting-edge security technologies.
• A strong focus on collaboration and growth.
• A role where you can directly influence Apex's global security posture and support secure integration across growth, transformation, and M&A initiatives.

Additional information:

We are an equal opportunity employer and ensure that no applicant is subject to less favourable treatment on the grounds of gender, gender identity, marital status, race, colour, nationality, ethnicity, age, sexual orientation, socio-economic, responsibilities for dependents, physical or mental disability. Any hiring decision are made on the basis of skills, qualifications and experiences. We measure our success as a business, not only by delivering great products and services and continually increasing our assets under administration and market share, but also by how we positively impact people, society and the planet. For more information on our commitment to Corporate Social Responsibility (CSR) please visit https://theapexgroup.com/csr-policy/. If you are looking to take that next step in your career and are ready to work for a high performing organization, alongside talented people who take pride in delivering great results, please submit your application (with your CV, cover letter and salary’s expectations).

Disclaimer: Unsolicited CVs sent to Apex (Talent Acquisition Team or Hiring Managers) by recruitment agencies will not be accepted for this position. Apex operates a direct sourcing model and where agency assistance is required, the Talent Acquisition team will engage directly with our exclusive recruitment partners.