Cloud Engineer

Core Responsibilities

•      Translate auditor checklists into action: take an auditor's findings/gap report and convert it into a scoped, sequenced technical remediation plan with tool choices, effort estimates, and timelines.

•      Backup & Disaster Recovery: design and deploy backups from zero (AWS Backup, Veeam, or equivalent) — define RPO/RTO, configure jobs, run and document restore tests, write the DR runbook.

•      Logging, Monitoring & SIEM: deploy centralized logging (AWS CloudTrail, CloudWatch, VPC Flow Logs, GuardDuty) and aggregate auth/firewall/application logs into a SIEM (Wazuh, OpenSearch, or commercial); configure alerting and retention to satisfy audit evidence requirements.

•      AWS Security Hardening: remediate IAM policies, roles, and root-account controls; audit and lock down security groups and NACLs; implement AWS Config, Security Hub, and least-privilege architecture.

•      Patch Management: replace manual patching with a documented, automated, reportable process (AWS Systems Manager Patch Manager, Intune/WSUS, or MDM-driven).

•      Networking & Data Center: configure and troubleshoot firewalls, VLANs, VPNs, and Wi-Fi segmentation (guest vs corporate); support on-prem server rooms and hosted/DC environments.

•      Endpoint & Identity: operate EDR/XDR (CrowdStrike or similar), MDM, and identity/SSO platforms (JumpCloud, Entra/Azure AD, Google Workspace) — MFA enforcement, provisioning/deprovisioning automation.

•      Physical Security Evidence: bring CCTV and access-control systems into a recorded, retained, evidence-producing state (NVR configuration, retention policy, access logs).

•      Evidence & Handover: produce the screenshots, exports, configs, and documentation the auditor needs; tune generic policy templates to the client's actual deployed environment; support re-verification. 

•      Ongoing Managed Services: convert completed remediations into AMC/managed-services retainers — monitoring, patching cycles, log review, periodic restore tests.

•      Client-Facing Delivery: run on-site technical assessments and walkthroughs, and explain findings and fixes in plain language to founders and CXOs.

Must-Have Skills & Experience

•      4–7 years hands-on infrastructure/security engineering — ideally at an MSP, MSSP, or IT services firm handling multiple technologies across multiple clients.

•      AWS working proficiency: IAM, EC2, VPC, S3, RDS, CloudTrail, CloudWatch, AWS Backup, Systems Manager.

•      Demonstrated delivery of at least two of: enterprise backup/DR, SIEM/centralized logging, patch automation, firewall/network security.

•      Networking fundamentals (TCP/IP, VLANs, firewalls, VPNs, routing) — able to troubleshoot independently on-site.

•      Windows and Linux server administration.

•      Clear documentation skills and the ability to communicate with non-technical stakeholders in English (Kannada/Hindi a plus for field work).

•      Willingness to travel to Bengaluru client sites; comfortable as the sole technical owner on an engagement.