{"id":128692,"url":"https://alion.io/job/paramount-senior-it-cloud-security-engineer","title":"Senior IT Cloud Security Engineer","company":{"id":48613,"name":"Paramount Computer Systems","domain":"paramountassure.com","url":"https://alion.io/company/paramountassure","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":{"grade":"A","score":92,"open_postings":69,"ghost_share":0.043,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":225,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"DLP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-08-05T13:04:18Z","employer_posted_date":"2026-08-05","last_verified_at":"2026-10-17T00:53:33Z","board_verified":true,"closed_at":null,"days_open":72,"trust":{"level":"ok","repost_count":1,"flags":["company_stale"],"days_open":71},"description":"Job Description\nJob title: Senior IT Cloud Security Engineer\nReports to: Head of Technology Operations & Security\nLocation: Remote (India)\nRole purpose:\nTo design, implement, and manage the organization’s end-to-end security posture across AWS and Azure cloud environments, endpoints, data, communications, and systems. The role ensures Zero Trust principles are applied across all layers’ identity, access, data, and infrastructure and leads SecOps and SOC operations to protect against cyber threats, ensure compliance, and maintain operational resilience.\nKey responsibilities:\nCloud Security Architecture & Governance\nAct as a multi-cloud security architect with a primary focus on AWS and secondary focus on Azure.\nDesign and implement secure cloud architectures that align with organizational standards and regulatory requirements.\nManage and harden cloud environments using AWS services (EC2, S3, RDS, IAM, VPC, CloudFormation, Route 53, CloudWatch) and Azure services (VMs, Storage, Networking, Azure AD, Synapse).\nApply Zero Trust principles across all cloud layers, enforcing segmentation, least privilege, and secure access policies.\nConduct regular cloud security posture reviews and audits, ensuring adherence to frameworks such as ISO 27001, NIST, CIS, and SCA.\nMicrosoft & Identity Security Management\nAdminister and secure Microsoft 365, Exchange, Active Directory, and Windows Server OS environments.\nEnsure effective management of domain services, identity synchronization, and group policies.\nImplement Conditional Access, MFA, and Privileged Access Management (PAM) controls to protect user and administrative identities.\nIntegrate and maintain identity federation between cloud and on-prem systems for unified authentication.\nInfrastructure Operations & BAU Security\nOversee infrastructure BAU operations including backups, patching, monitoring, and capacity management.\nLead SecOps activities including endpoint patching, vulnerability remediation, and system hardening.\nManage both Windows and Linux operating systems, ensuring compliance with hardening benchmarks.\nCollaborate with the NOC team to ensure continuous monitoring, incident response, and SLA compliance.\nMaintain and secure limited on-prem infrastructure, including firewalls, switches, and IP telephony systems.\nAutomation, DevSecOps & Infrastructure as Code (IaC)\nImplement and manage CI/CD pipelines using Azure DevOps (preferred), AWS CodePipeline, and GitHub Actions.\nApply Infrastructure as Code (IaC) principles using Terraform, CloudFormation, ARM, Bicep, and Ansible to automate provisioning and enforce secure configurations.\nIntegrate security scanning (SAST, DAST, dependency checks) into development and deployment pipelines.\nDeploy and manage container platforms (Amazon EKS, Azure AKS) with secure baseline configurations.\nSecurity Operations (SOC) & Incident Management\nOversee SOC operations, ensuring effective monitoring, alert triage, and incident response.\nUtilize SIEM/SOAR tools (Azure Sentinel, Splunk, AWS Security Hub) for centralized visibility and automation.\nLead the incident response lifecycle-detection, containment, investigation, remediation, and lessons learned.\nConduct root cause analysis for major incidents and ensure continuous improvement of detection rules.\nCoordinate with cross-functional teams for vulnerability remediation and threat intelligence sharing.\nRisk Management, Compliance & Resilience\nConduct vulnerability assessments, penetration testing, and compliance reviews across systems and networks.\nDefine risk treatment plans and ensure timely mitigation of identified risks.\nMaintain documentation for all cloud security controls, policies, and configurations.\nImplement and validate Disaster Recovery (DR) and Business Continuity strategies across AWS and Azure.\nDrive continuous security improvement through automation, governance, and training.\nRequired qualifications & experience:\nBachelor’s degree in Computer Science, Information Security, or related field (Master’s preferred).\n10+ years of IT and security experience, with at least 5 years in multi-cloud (AWS and Azure) security.\nProven track record designing and managing cloud and hybrid security architectures.\nExperience implementing Zero Trust frameworks and securing cloud infrastructure and endpoints.\nHands-on expertise with IAM, EDR, DLP, encryption, and vulnerability management tools.\nExperience managing SOC/SecOps and supporting compliance with ISO 27001, NIST, and SCA standards.\nCertifications:CISSP or CCSP (required)\nAWS Certified Security - Specialty (preferred)\nMicrosoft Certified: Cybersecurity Architect Expert or Azure Security Engineer Associate (preferred)\nISO 27001 Lead Implementer or Zero Trust Certified Architect (advantage)\nITIL Foundation (preferred)\n\nSkills & competencies:\nCloud security architecture (AWS & Azure).\nIdentity and access management (IAM, PAM, MFA, Conditional Access).\nInfrastructure as Code (Terraform, CloudFormation, ARM, Bicep, Ansible).\nSOC and SecOps operations management.\nEndpoint and vulnerability management (EDR, patching, DLP).\nDevSecOps and CI/CD integration (Azure DevOps preferred).\nNetworking, firewalls, VPN, and hybrid connectivity security.\nCompliance with ISO 27001, NIST, and SCA frameworks.\nDisaster Recovery and business resilience planning.\nStrong analytical and problem-solving mindset.\nEffective communication with technical and non-technical stakeholders.\nHigh attention to detail and accountability.\nCollaborative and team-oriented approach.\nContinuous learning and adaptability to evolving threats and technologies.","description_format":"text","description_chars":5594,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Information Security","Security Compliance","Managed Security"],"lifecycle":[{"event":"open","at":"2026-08-05T13:04:18Z"},{"event":"close","at":"2026-10-06T14:04:58Z"},{"event":"reopen","at":"2026-10-11T19:42:23Z"}],"visa":[],"liveness":{"score":71,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.884,"p_room":0.8,"age_days":71,"expected_fill_days":225,"reasons":["conf:2","velocity","win:early","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/paramount-senior-it-cloud-security-engineer","json_url":"https://alion.io/job/paramount-senior-it-cloud-security-engineer.json","meta":{"generated_at":"2026-10-17T02:28:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3451,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48613},"rest":"https://alion.io/mcp/rest/get_company?id=48613"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fparamount-senior-it-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fparamount-senior-it-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fparamount-senior-it-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/paramount-senior-it-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fparamount-senior-it-cloud-security-engineer"}]}