Cloud Engineer - Azure/Cloud Security
First seen by Alion on Nov 12, 2026. EPAM Systems scores C on the Alion truth index.
Position : Cloud Engineer (Azure + Cloud Security)
Experience : 6 years
Job Location : Bangalore
Work Model : Hybrid - 2 to 3 Days Work from Office (Mandatory)
Notice Period : Immediate Joiners / Candidates who can join within 15 - 30 days preferred.
Candidate Preference : Only candidates currently residing in Bangalore and locally available for the Bangalore office will be considered.
Key Responsibilities :
- Remediate cloud security, vulnerability, and audit findings against agreed target - state configuration; track closure with evidence.
- Harden Azure storage, compute, networking, key management, and logging against defined baselines.
- Implement Azure Policy, tagging, governance guardrails, RBAC and privileged access controls; clean up legacy/orphaned resources.
- Build landing zone components to the defined architecture: subscription/resource group structure, spoke VNets, subnets, route tables, security groups, private endpoints, and private DNS.
- Configure hybrid connectivity including VPN Gateway, ExpressRoute, and peering; implement firewall rules aligned to documented business requirements and segmentation.
- Deploy infrastructure as code where practical using repeatable, automated builds.
- Assess migration candidates, documenting dependencies, connectivity, data flows, and constraints.
- Execute Azure migration waves covering build, data transfer, testing, cutover, rollback, and coordination with application, Windows, and Linux teams.
- Validate performance, resilience, backup, and monitoring before production acceptance; ensure security telemetry reaches SOC and decommission source infrastructure after approval.
- Produce as - built documentation and runbooks; follow formal change management, security standards, and MAS Technology Risk Management requirements.
- Provide structured knowledge transfer to the permanent team at agreed milestones.
Requirements :
- 6 years of hands - on Azure engineering experience, with proven migration or remediation delivery.
- Experience delivering against architectures defined by others, established standards, and formal change control.
- Operational Azure expertise across compute, storage, networking, Azure Policy, RBAC, and resource governance.
- Strong Azure networking experience: VNets, subnets, NSGs, route tables, private endpoints/DNS, VPN Gateway, and ExpressRoute.
- Identity and secrets management: Entra ID, RBAC, Privileged Identity Management, Key Vault, and managed identities.
- Infrastructure as code and automation using Terraform or Bicep, PowerShell, Azure CLI, and CI/CD pipelines.
- Migration tooling experience including Azure Migrate, Site Recovery, backup/replication, and dependency mapping.
- Operational tooling experience including Azure Monitor, Log Analytics, alerting, and cost visibility.
- Experience in regulated environments and working with least - privileged, time - bound access and strict data handling.
- Financial services experience is advantageous.
Must have skills :
- Azure Networking
- Infrastructure as Code development and maintenance
- Microsoft Azure
- Microsoft Entra ID
- Role - based Access Control
Skills
Cloud Security, Azure, Cloud, Configuration Management, Security, PowerShell, Terraform, CI/CD, Entra ID, VPN, DevOps