{"id":2802988,"url":"https://alion.io/job/zorba-consulting-cloud-security-engineer-azure-gcp","title":"Cloud Security Engineer - Azure & GCP","company":{"id":3800188,"name":"Zorba Consulting","domain":"zorbaconsulting.in","url":"https://alion.io/company/zorba-consulting","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":20000,"max_usd":43000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"Google BigQuery","optional":false},{"name":"Google Cloud Run","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false}],"status":"live","first_seen_at":"2026-07-25T14:11:55Z","employer_posted_date":null,"last_verified_at":"2026-07-25T14:11:55Z","board_verified":false,"closed_at":null,"days_open":88,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":88},"description":"Job Summary:\n\nWe are looking for a hands-on Cloud Security Architect with strong engineering expertise in securing enterprise workloads across Microsoft Azure and Google Cloud Platform (GCP).\n\nThis is an implementation-focused role requiring extensive experience configuring cloud-native security services, automating security controls, and securing cloud infrastructure using Infrastructure as Code (IaC).\n\nThe ideal candidate should possess equal hands-on expertise in Azure and GCP, be proficient in Terraform, and work closely with Platform Engineering, DevOps, and Product teams to build secure, scalable cloud environments.\n\nKey Responsibilities:\n\nCloud Security Engineering:\n\n- Configure and manage Microsoft Defender for Cloud (Servers, Containers, Storage, Key Vault, DNS, Resource Manager).\n\n- Implement and manage Azure Firewall, Network Security Groups (NSGs), Azure WAF, Private Link, and Private Endpoints.\n\n- Administer Azure Key Vault, certificate lifecycle, and workload integration.\n\n- Configure Microsoft Entra ID (Azure AD) including Conditional Access, Privileged Identity Management (PIM), RBAC, Workload Identities, and Service Principal security.\n\n- Manage Google Security Command Center (SCC), including Security Health Analytics, Event Threat Detection, and Container Threat Detection.\n\n- Design and secure GCP VPC architectures, firewall rules, Shared VPC, Private Google Access, and VPC Service Controls.\n\n- Secure BigQuery environments using row/column-level security, authorized views, data masking, and VPC Service Controls.\n\n- Harden Cloud Run deployments with ingress controls, Binary Authorization, service identities, and secret management.\n\n- Implement and manage GCP IAM, custom roles, Organization Policies, Workload Identity Federation, and service account governance.\n\nCloud Security Architecture:\n\n- Design and evolve enterprise cloud security architecture across Azure and GCP.\n\n- Evaluate security implications of new cloud services before adoption.\n\n- Ensure compliance with ISO 27001, ISO 27017, GDPR, and SOC 2.\n\n- Collaborate with Microsoft and Google technical teams on security best practices.\n\n- Monitor cloud security posture using Secure Score, Defender for Cloud, and Google SCC dashboards.\n\nAutomation & DevSecOps:\n\n- Develop reusable Terraform modules for Azure and GCP security configurations.\n\n- Automate security provisioning using Infrastructure as Code.\n\n- Integrate security scanning into CI/CD pipelines, including:\n\n1. Infrastructure as Code scanning.\n\n2. Container image scanning.\n\n3. Dependency vulnerability scanning.\n\n- Implement Policy-as-Code using Azure Policy, GCP Organization Policies, OPA, Sentinel, Checkov, and tfsec.\n\nCollaboration:\n\n- Partner with DevOps and Product Engineering teams to implement security controls.\n\n- Design scalable IAM models and enforce least-privilege access.\n\n- Support Security Champion initiatives and internal cloud security knowledge sharing.\n\n- Translate security requirements into practical engineering solutions.\n\nRequired Skills:\n\n- 5+ years of hands-on experience securing Microsoft Azure environments.\n\n- 3+ years of hands-on experience securing Google Cloud Platform (GCP) environments.\n\n- Strong expertise with:\n\n1. Microsoft Defender for Cloud.\n\n2. Azure Firewall.\n\n3. Azure WAF.\n\n4. Azure Key Vault.\n\n5. Microsoft Entra ID.\n\n6. Azure Monitor / Microsoft Sentinel.\n\n7. Google Security Command Center (SCC).\n\n8. GCP IAM.\n\n9. VPC Networking.\n\n10. Organization Policies.\n\n11. BigQuery Security.\n\n12. Cloud Run Security.\n\n- Strong experience with Terraform for Azure and GCP.\n\n- Experience triaging and remediating findings from Defender for Cloud and Google SCC.\n\n- Expertise in cloud networking security:\n\n1. Firewalls.\n\n2. Private Connectivity.\n\n3. DNS Security.\n\n4. DDoS Protection.\n\n- Strong knowledge of Identity & Access Management:\n\n1. RBAC.\n\n2. Conditional Access.\n\n3. Workload Identity.\n\n4. Service Account Governance.\n\n- Experience securing Kubernetes environments (AKS/GKE) and container workloads.\n\nPreferred Skills:\n\n- Microsoft Sentinel or Google Chronicle.\n\n- Azure DDoS Protection.\n\n- Azure Front Door WAF.\n\n- Google Cloud Armor.\n\n- Azure Confidential Computing.\n\n- GCP Assured Workloads.\n\n- Policy-as-Code frameworks:\n\n1. OPA.\n\n2. Sentinel.\n\n3. Checkov.\n\n4. tfsec.\n\nCertifications (Preferred):\n\n- Microsoft Certified: AZ-500.\n\n- Microsoft Certified: SC-100.\n\n- Google Professional Cloud Security Engineer.\n\nSkills:\n\n- cloud security, azure, gcp.\nSkills\nCloud Security, Azure, Google Cloud Platform, Azure Defender, Entra ID, Privilege Identity Management, Azure Sentinel","description_format":"text","description_chars":4599,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","AI Consulting & Integration","Analytics & BI Consulting"],"lifecycle":[{"event":"open","at":"2026-10-18T01:22:52Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.508,"p_room":0.28,"age_days":88,"expected_fill_days":27,"reasons":["seen:88","velocity","win:tail","crowd:"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/zorba-consulting-cloud-security-engineer-azure-gcp","json_url":"https://alion.io/job/zorba-consulting-cloud-security-engineer-azure-gcp.json","meta":{"generated_at":"2026-10-22T11:22:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9285,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3800188},"rest":"https://alion.io/mcp/rest/get_company?id=3800188"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzorba-consulting-cloud-security-engineer-azure-gcp"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzorba-consulting-cloud-security-engineer-azure-gcp"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzorba-consulting-cloud-security-engineer-azure-gcp"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zorba-consulting-cloud-security-engineer-azure-gcp\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzorba-consulting-cloud-security-engineer-azure-gcp"}]}