{"id":763585,"url":"https://alion.io/job/kore-ai-cloud-infrastructure-security-architect","title":"Cloud & Infrastructure Security Architect","company":{"id":4710,"name":"Kore.ai","domain":"kore.ai","url":"https://alion.io/company/kore-ai","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":52000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":617},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"Cosign","optional":false},{"name":"CVE","optional":false},{"name":"etcd","optional":false},{"name":"Falco","optional":false},{"name":"GCP","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"Istio","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linkerd","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Pacu","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Service Mesh","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Snyk","optional":false},{"name":"Sysdig Secure","optional":false},{"name":"Terraform","optional":false},{"name":"Terrascan","optional":false},{"name":"tfsec","optional":false},{"name":"Trivy","optional":false},{"name":"Vault","optional":false},{"name":"Zero Trust","optional":false},{"name":"Aqua Security","optional":true},{"name":"Cilium","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"Docker","optional":true},{"name":"eBPF","optional":true},{"name":"External Secrets","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"IBM QRadar","optional":true},{"name":"ISO 27001","optional":true},{"name":"KICS","optional":true},{"name":"kube-bench","optional":true},{"name":"Lacework","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"NIST CSF","optional":true},{"name":"Prisma Cloud","optional":true},{"name":"Prowler","optional":true},{"name":"SOC 2","optional":true},{"name":"Splunk","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-04-28T06:37:03Z","employer_posted_date":"2026-04-28","last_verified_at":"2026-10-16T18:40:33Z","board_verified":true,"closed_at":null,"days_open":171,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":170},"description":"Kore.ai is a pioneering force in enterprise AI transformation, empowering organisations through our comprehensive agentic AI platform. With innovative offerings across \"AI for Service,\" \"AI for Work,\" and \"AI for Process,\" we're enabling over 400+ Global 2000 companies to fundamentally reimagine their operations, customer experiences and employee productivity.\nOur end-to-end platform enables enterprises to build, deploy, manage, monitor, and continuously improve agentic applications at scale. We've automated over 1 billion interactions every year with voice and digital AI in customer service, and transformed employee experiences for tens of thousands of employees through productivity and AI-driven workflow automation.\nRecognised as a leader by Gartner, Forrester, IDC, ISG, and Everest, Kore.ai has secured Series D funding of $150M, including strategic investment from NVIDIA to drive Enterprise AI innovation. Founded in 2014 and headquartered in Florida, we maintain a global presence with offices in India, UK, Germany, Korea, and Japan.\n POSITION / TITLE:\nCloud & Infrastructure Security Architect\nLocation: Hyderabad\nExperience: 8-10+ years\nPOSITION SUMMARY:\nAbout the Role\nWe are looking for a Cloud & Infrastructure Security Architect to serve as the security authority across our multi-cloud environment. You will define the security architecture standards our infrastructure must meet, govern continuous audit and assurance to ensure zero gaps, and drive measurable improvement in cloud security posture across AWS, Azure, and GCP. This is a hands-on architecture role with real ownership - you will shape how our cloud environments are secured, not just advise on it.\nRESPONSIBILITIES:,\nCLOUD SECURITY ARCHITECTURE & STANDARDS\nDefine and own the cloud security architecture across AWS, Azure, and GCP - establishing the authoritative security baseline, guardrails, and standards the environment must meet.\nDrive secure landing zone architecture - account and subscription structure, network segmentation, logging pipelines, and security control inheritance.\nLead security architecture reviews and sign-offs for new cloud infrastructure designs, platform changes, and cloud migration initiatives.\nDefine multi-cloud IAM architecture - least privilege design, role federation, cross-account trust models, service principal governance, and privileged access management.\nArchitect secrets management standards across AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager - covering rotation, access governance, and audit requirements.\nPublish reusable, secure reference architectures and approved cloud service patterns that embed security into infrastructure decisions by default.\nCONTINUOUS AUDIT, ASSURANCE & POSTURE MANAGEMENT\nOwn the continuous cloud security audit program - systematically evaluating the live environment against defined standards to detect gaps, drift, and deviations before they become incidents.\nGovern Cloud Security Posture Management (CSPM) - interpret findings, triage by exploitability and business risk, enforce remediation SLAs, and drive posture improvement to measurable outcomes.\nConduct deep-dive security audits - IAM privilege analysis, network exposure reviews, encryption gap assessments, logging completeness checks, and workload configuration audits.\nDefine and enforce cloud security benchmarks aligned to CIS Foundations (AWS, Azure, GCP), NIST SP 800-144, and CSA CCM - with clear pass/fail criteria measured continuously.\nMaintain the cloud security risk register - open gaps, accepted risks with rationale, remediation timelines, and closure evidence - reported to the CISO on a defined cadence.\nConduct adversarial validation using cloud attack simulation (Pacu, Stratus Red Team) to verify that controls and detection hold under real attack conditions.\nKUBERNETES & CONTAINER SECURITY\nOwn end-to-end Kubernetes security architecture at CKS depth - cluster hardening standards, workload isolation, admission control, network policy, secrets management, and runtime protection.\nDefine and enforce Kubernetes security standards: Pod Security Admission, RBAC governance, admission controllers (OPA/Gatekeeper, Kyverno), network policies, and control plane hardening.\nConduct regular Kubernetes security audits - CIS Kubernetes Benchmark assessments, RBAC privilege analysis, etcd security, API server reviews, and node-level gap detection.\nDefine container image security standards - base image governance, vulnerability scanning (Trivy, Aqua, Snyk), image signing (Cosign/Notary), and registry access controls.\nOwn runtime security architecture - deployment standards for Falco or Sysdig, coverage audits, and container escape/anomaly detection validation.\nescape/Kubernetes CVE triage and response - assess impact on cluster configurations and drive resolution to closure.\nIAC SECURITY & POLICY-AS-CODE\nReview and approve Infrastructure-as-Code templates - Terraform, AWS CDK, Bicep, and Helm charts - identifying misconfigurations, over-permissive IAM, exposed endpoints, and encryption gaps before deployment.\nDefine IaC security standards and reusable secure modules - pre-approved, security-hardened building blocks that make secure deployment the default.\nDefine IaC scanning standards and security gate requirements for CI/CD pipelines (Checkov, tfsec, Terrascan) with clear pass/fail criteria and remediation guidance.\nOwn the policy-as-code framework - define security policies automatically evaluated against every infrastructure change and continuously audit compliance.\nZERO TRUST & NETWORK SECURITY\nDefine and drive Zero Trust Architecture across cloud environments - identity-based access, micro-segmentation standards, service mesh security, and continuous verification principles.\nDesign cloud network security standards - VPC/VNet architecture, security group governance, private endpoint requirements, egress controls, and east-west traffic inspection.\nDefine service mesh security requirements (Istio, Linkerd) - mTLS enforcement, traffic policy standards, and observability integration\nConduct network security audits to identify deviations from approved architecture - exposed services, missing private endpoints, segmentation gaps.\nSERVERLESS & CLOUD-NATIVE SECURITY\nDefine security architecture standards for serverless workloads across AWS Lambda, Azure Functions, and GCP Cloud Functions - execution role minimisation, event source trust, and data protection requirements.\nAudit serverless and cloud-native deployments - identifying SSRF-to-metadata risks, over-permissive execution roles, insecure event triggers, and dependency risks.\nDefine security standards for cloud-native managed services - databases, message queues, object storage, API gateways - with mandatory encryption, access control, and audit logging requirements.\nTHREAT DETECTION & CLOUD INCIDENT RESPONSE\nDesign the cloud threat detection architecture - define detection requirements, tool selection (GuardDuty, Defender for Cloud, GCP SCC, Falco), and alert pipeline into SIEM and SOC workflows.\nAudit detection coverage - validate live detection configuration against designed architecture, identify blind spots, and drive tuning to close gaps.\nDefine cloud incident response playbooks for key scenarios: IAM compromise, data exposure, cryptomining, lateral movement, and container escape.\nDesign SIEM integration architecture - cloud log ingestion standards, detection use case requirements, and alert pipeline design, ensuring cloud threats surface operationally.\nConduct cloud attack simulations (Pacu, Stratus Red Team) to validate detection and response readiness under adversarial conditions.\nRequired Skills & Experience\n8-10+ years of progressive experience in cloud security, infrastructure security, or platform security architecture - with proven ownership of architecture design, posture management, and audit governance.\nExpert-level, multi-cloud security knowledge across AWS, Azure, and GCP - including deep familiarity with native security services, IAM models, and security tooling on each platform.\nKubernetes security expertise at CKS depth - cluster hardening, admission control, RBAC governance, network policy, runtime security, and secrets management architecture.\nStrong CSPM governance experience - owning the full posture management cycle from finding through triage, remediation SLA enforcement, drift detection, and maturity reporting.\nHands-on IaC security review experience - Terraform, CDK, Bicep, or Helm - including policy-as-code design and scanning tool governance (Checkov, tfsec, Terrascan).\nCloud threat detection architecture experience with GuardDuty, Defender for Cloud, or GCP SCC - detection engineering, coverage gap analysis, and SIEM integration.\nCloud attack simulation experience (Pacu, Stratus Red Team) - used to adversarially validate architectural controls and detection coverage\nZero Trust Architecture design experience - micro-segmentation, service mesh (mTLS), identity-based access, and network security in cloud environments.\nServerless security experience across AWS Lambda, Azure Functions, and GCP Cloud Functions.\nStrong scripting capability in Python and/or Bash for audit automation, posture checks, and custom gap detection.\nExcellent communication skills - able to present cloud security posture, risk, and architecture decisions clearly to both technical audiences and executive stakeholders.\nNice to have\nExperience with Security Operations Center (SOC) workflows and SIEM platforms (Splunk, Microsoft Sentinel, IBM QRadar, or Chronicle) - particularly cloud log ingestion, detection use case design, and alert-to-SOC pipeline architecture\nFamiliarity with cloud security maturity frameworks - CSA CCM, CIS Controls, NIST CSF - and experience using them to produce measurable improvement roadmaps\nExposure to AI/ML workload security in cloud environments - data pipeline security, model serving infrastructure, and cloud-hosted AI service controls\nExperience supporting enterprise customer security reviews, RFP/RFI responses, or third-party security assessments in a customer-facing capacity\nBackground in regulated environments with exposure to frameworks such as SOC 2, ISO 27001, or NIST\nCertifications\nThe following certifications are preferred. Candidates who demonstrate equivalent hands-on depth without a specific certification will be considered.\nCertification\nFull Name\nLevel\nCKS\nCertified Kubernetes Security Specialist\nPreferred\nAWS Security Specialty\nAWS Certified Security - Specialty\nPreferred\nAZ-500\nAzure Security Engineer Associate\nPreferred\nCKA\nCertified Kubernetes Administrator\nAdvantageous\nCCSP\nCertified Cloud Security Professional (ISC2)\nAdvantageous\nGCP Security Engineer\nGoogle Professional Cloud Security Engineer\nAdvantageous\nGCIA / GCIH\nGIAC Intrusion Analyst / Incident Handler\nAdvantageous - SOC background\nOSCP / PNPT\nOffensive Security / Practical Network Pentest\nAdvantageous\nCore Technologies & Tools\nCloud Platforms\nAWS, Microsoft Azure, GCP - native security services, IAM, logging, detection, and CSPM on each\nCSPM & Posture\nPrisma Cloud, Wiz, Prowler, Lacework, AWS Security Hub, Defender for Cloud, GCP Security Command Center\nKubernetes Security\nCKS-level: OPA/Gatekeeper, Kyverno, Falco, Sysdig, Trivy, Aqua Security, Cosign, kube-bench, External Secrets Operator\nContainer Security\nTrivy, Aqua Security, Snyk Container, Docker Scout, image signing (Cosign/Notary), registry security\nIaC Security\nCheckov, tfsec, Terrascan, KICS - Terraform, AWS CDK, Bicep, Helm\nSecrets Management\nHashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager\nCloud IAM\nAWS IAM Analyzer, Azure Entra ID / PIM, GCP Workload Identity / IAM Recommender\nThreat Detection\nAWS GuardDuty, Microsoft Defender for Cloud, GCP SCC, Falco - detection engineering and SIEM integration\nSIEM / SOC\nSplunk, Microsoft Sentinel, IBM QRadar, Chronicle - cloud log ingestion and detection use case design\nAttack Simulation\nPacu, Stratus Red Team...","description_format":"text","description_chars":13013,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Natural Language Processing","Conversational AI","AI Agents"],"lifecycle":[{"event":"open","at":"2026-09-11T19:14:27Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.479,"p_room":0.28,"age_days":170,"expected_fill_days":49,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/kore-ai-cloud-infrastructure-security-architect","json_url":"https://alion.io/job/kore-ai-cloud-infrastructure-security-architect.json","meta":{"generated_at":"2026-10-16T21:33:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2621,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4710},"rest":"https://alion.io/mcp/rest/get_company?id=4710"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkore-ai-cloud-infrastructure-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkore-ai-cloud-infrastructure-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkore-ai-cloud-infrastructure-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kore-ai-cloud-infrastructure-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkore-ai-cloud-infrastructure-security-architect"}]}