Cloud Security Engineer

Interview : Phone and skype
Visa : All apart from H1B and CPT
Description:
Need 8+ years of overall exp with strong expereince on Azure
Cloud Security Engineer
Our Client is looking for a Cloud Security Engineer to serve as a key member of our network security team. This position will help mentor other team members in the day-to-day operations including but not limited to: troubleshooting, monitoring, detecting, analyzing, and determining remediation efforts for security risks, events, and incidents. This position will also be involved in developing Client's cloud and network security strategies, which includes hybrid cloud, DevSecOps, co-locations, etc... This position requires a high degree of technical skill, innovation, and creativity. It also requires staying current with new and emerging trends, theories, standards, and technologies.
Duties and Responsibilities:

• Understanding fundamental cloud computing concepts
• Building and operating automated security operations in cloud environment
• PaaS/SaaS/IaaS security evaluation and design
• Develop security automation and APIs in the public cloud across the key pillars of security namely IAM, CI/CD security, security logging, incident response, data protection, compliance validation, security analytics, vulnerability management, platform and application threat modeling, etc.
• Parsing through event logs/files analyzing and determining security related issues.
• Provide a process driven approach which ensures accuracy and consistency.
• Create, maintain, and update technical and architectural documentation
• Excellent communication skills and the ability to partner and collaborate with both engineers, architects, business users, and leaders on architecture and security models
• Participates in other security operations duties as requested, including an on call schedule.

• Expert level knowledge of networking, information systems, security controls, and information security concepts (CIA, defense in depth, etc...)
• Experience with container technologies (Docker,AKS Kubernetes)
• Proven experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM) and network security
• Advanced knowledge of troubleshooting, log analysis, event correlation, and data analysis with a strong understanding of TCP/?IP and networking
• Demonstrated experience and/or familiarity with tools used for security analysis (e.g., tcpdump, Wireshark, snort, ngrep, nmap, strings, hexdump, md5sum, systools)
• Experience with creating automation scripts (Terraform, Python, Bash, PowerShell, Ansible, etc...)
• Experience or familiarity with Firewall/NGFW deployed in a variety of form factors (Checkpoint, Cisco, Palo Alto, Azure Firewall)
• Experience or familiarity with Private and public Cloud Architecture (Azure)
• Provide technical services and support for the following areas, WAN connectivity, routers, firewalls, and security, cloud network infrastructure, partner interconnects.
• Configure and troubleshoot Cloud network components, routers, switches, optical transport, and other network equipment.
• Integrating corporate routing schemes with Cloud resident networks.
• Experience or familiarity with micro segmentation solution.
• Experience or familiarity with Load Balancing, Web Application FW, and Authentication solutions (F5, AVI, Azure)
• Excellent verbal and written communication skills

• Bachelor's degree in Networking, Computer Science, Information Security or equivalent related work experience.
• Preferred security certifications: CompTIA Security+, CISSP, CCSP, CCNA Security, CCNP, GNFA, GSEC, GSE
• Microsoft Azure and/or AWS certification