Digital Trust CloudSec- Senior

Description

The Cloud Security DevOps Engineer will be responsible for ensuring the security and compliance aspects of cloud-based infrastructure for KPMG India. The incumbent should be knowledgeable in DevOps, Cloud, Kubernetes, Terraform, Python, and have a deep understanding of the ISO framework. The successful candidate will work closely with the technology team to deliver secure and reliable cloud-based solutions for KPMG India clients.

Responsibilities

1. Work closely with the technology team to build and maintain secure, scalable, and highly available cloud-based infrastructure.
2. Develop and maintain cloud-based security policies, procedures, and guidelines.
3. Conduct ongoing security assessments and audits to identify vulnerabilities and ensure compliance with ISO standards.
4. Implement and maintain security controls across various cloud platforms (e.g. AWS, Azure, GCP).
5. Develop and maintain scripts and tools for automated security testing, monitoring, and incident response.
6. Support the technology team in designing, implementing, and testing secure and reliable cloud-based solutions.
7. Provide training and education to team members on cloud-based security best practices and standards.
8. Collaborate with other teams (e.g. cyber security, IT operations) to ensure the security and compliance of the entire infrastructure.
9. Stay up to date on emerging cloud security trends and technologies.

Qualifications

1. Bachelor's degree in Computer Science, Information Technology, or related field.
2. 3+ years of experience in DevOps, Cloud, Kubernetes, Terraform, Python, and cloud security.
3. DevOps – Should have set up pipelines, worked on blue/green deployment models with tools such as GitHub actions, Jenkins, Code Deploy etc., and should have worked in production environments.
4. Strong understanding of ISO 27001, 27002, and other relevant security standards.
5. Hands-on experience with cloud security tools and technologies (e.g. AWS Security Hub, Azure Security Center, GCP Security Command Center).
6. Working experience in creating IaC templates for multi-cloud using Terraform is expected
7. Should have integrated telemetry back into security systems such as SIEM while setting up and working SAST and DAST tools
8. Excellent scripting skills in Python and Shell.
9. Strong analytical and problem-solving skills.
7. Excellent communication and interpersonal skills.
8. Ability to work collaboratively in a team environment.
9. Certifications in cloud security (e.g. CCSK, CCSP) and experience with other cloud platforms (e.g. OpenStack, VMware) are a plus.

This job description is not intended to be all-inclusive. The employee will also perform other reasonable related duties as assigned by the supervisor or management. KPMG India reserves the right to modify, interpret, or apply this job description in any way the company desires. This job description does not imply or create an employment contract, implied or otherwise, between the Company and employee.

Equal employment opportunity information 

KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.