Cloud Engineer

Job Overview

We are seeking a skilled Cloud Engineer to join our team in Bengaluru, Karnataka, India. This role involves translating audit findings into actionable remediation plans and implementing technical solutions across cloud security, backup, monitoring, and infrastructure operations with a strong focus on AWS and security best practices.

Primary Responsibilities

• Convert auditor checklists and gap reports into detailed, prioritized remediation plans including technical tools, effort assessments, and timelines.
• Design and deploy comprehensive backup and disaster recovery solutions from scratch using AWS Backup, Veeam, or similar tools. Establish recovery point and time objectives, configure backup jobs, conduct restore tests, and maintain disaster recovery documentation.
• Implement centralized logging, monitoring, and SIEM solutions (using AWS CloudTrail, CloudWatch, VPC Flow Logs, GuardDuty, Wazuh, OpenSearch, or commercial alternatives) ensuring alerting and log retention meet audit compliance.
• Strengthen AWS security by remediating IAM policies, roles, root account safeguards, tightening security groups and network ACLs, and deploying AWS Config, Security Hub, and enforcing least-privilege architectures.
• Automate patch management processes to replace manual methods with documented, reportable systems via AWS Systems Manager Patch Manager, Intune/WSUS, or MDM platforms.
• Manage networking and datacenter tasks including firewall configuration and troubleshooting, VLAN and Wi-Fi segmentation, VPN operation, and support for on-premises server rooms and hosted data centers.
• Operate endpoint security and identity solutions such as EDR/XDR (CrowdStrike or similar), MDM, and identity/SSO platforms (JumpCloud, Entra/Azure AD, Google Workspace) focusing on MFA enforcement and automation of user provisioning and deprovisioning.
• Ensure physical security systems like CCTV and access control generate retained, valid evidence by setting up NVR configurations, retention policies, and access logs.
• Produce all necessary documentation, screenshots, exports, and configuration files auditors require, customizing policy templates to client environments and supporting re-audits.
• Transition completed remediations into ongoing managed services agreements that include monitoring, patch cycles, log reviews, and regular restore testing.
• Lead on-site technical assessments and client presentations, communicating technical findings and remediation steps clearly to founders and CXOs.

Required Qualifications and Skills

• 4 to 7 years of hands-on experience in infrastructure and security engineering, preferably in MSP, MSSP, or IT service environments managing diverse technologies and clients.
• Proficient with AWS services such as IAM, EC2, VPC, S3, RDS, CloudTrail, CloudWatch, AWS Backup, and Systems Manager.
• Proven implementation experience in at least two of the following: enterprise backup and disaster recovery, SIEM or centralized logging, patch automation, firewall and network security.
• Solid understanding of networking principles including TCP/IP, VLANs, firewalls, VPNs, and routing with strong troubleshooting capabilities on-site.
• Skilled in administering both Windows and Linux servers.
• Excellent documentation skills and ability to explain technical information to non-technical audiences in English; additional languages such as Kannada or Hindi beneficial for fieldwork.
• Preparedness to travel to client locations in Bengaluru and act as the primary technical lead on projects.