Principal Cloud Security Engineer

Role purpose :

To design, implement, and manage the organization’s end-to-end security posture across AWS and Azure cloud environments, endpoints, data, communications, and systems. The role ensures Zero Trust principles are applied across all layers identity, access, data, and infrastructure and leads SecOps and SOC operations to protect against cyber threats, ensure compliance, and maintain operational resilience.

Key responsibilities :

Cloud Security Architecture & Governance

• Act as a multi-cloud security architect with a primary focus on AWS and secondary focus on Azure.
• Design and implement secure cloud architectures that align with organizational standards and regulatory requirements.
• Manage and harden cloud environments using AWS services (EC2, S3, RDS, IAM, VPC, CloudFormation, Route 53, CloudWatch) and Azure services (VMs, Storage, Networking, Azure AD, Synapse).
• Apply Zero Trust principles across all cloud layers, enforcing segmentation, least privilege, and secure access policies.
• Conduct regular cloud security posture reviews and audits, ensuring adherence to frameworks such as ISO 27001, NIST, CIS, and SCA.

Microsoft & Identity Security Management

Infrastructure Operations & BAU Security

Automation, DevSecOps & Infrastructure as Code (IaC)

Security Operations (SOC) & Incident Management

Risk Management, Compliance & Resilience

Required qualifications & experience :

o CISSP or CCSP (required)

o AWS Certified Security – Specialty (preferred)

o Microsoft Certified : Cybersecurity Architect Expert or Azure Security Engineer Associate (preferred)

o ISO 27001 Lead Implementer or Zero Trust Certified Architect (advantage)

o ITIL Foundation (preferred)

Skills & competencies :