Cloud Infrastructure & Terraform

Design, deploy and manage cloud resources across AWS, Azure and GCP.
Develop and maintain reusable Terraform modules for cloud resource deployment.
Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.
Promote reusable, scalable and secure infrastructure deployment patterns.
Build, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.
Integrate infrastructure and security validations into application deployment pipelines.
Troubleshoot pipeline failures and security-policy validation issues.
Support development teams in adopting automated security controls within their existing CI/CD workflows., Develop automation solutions using Python to improve operational efficiency and reduce repetitive manual activities.
Develop and maintain Rego/OPA policies for automated cloud and Infrastructure as Code security validation.
Investigate policy failures, false positives and configuration issues.
Work with application teams to understand policy violations and provide appropriate remediation guidance.
Strong understanding of cloud security controls across AWS, Azure and GCP.
Implement and support Azure Policies for governance and security enforcement.
Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).
Understand and troubleshoot cloud IAM roles, permissions and access controls.
Support secure deployment patterns and cloud governance requirements across multiple cloud environments.
Strong understanding of Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) concepts.
Hands-on or operational knowledge of Wiz and CloudGuard.
Investigate cloud security findings, policy violations and configuration issues identified through CNAPP/CSPM platforms.
Work with application and Cyber Security teams to understand findings and support remediation.
Assist application teams with onboarding and adoption of cloud security solutions.
Collaborate closely with Cyber Security, Cloud Engineering, DevOps and application development teams.
Provide technical guidance to application teams during solution adoption and onboarding.
Investigate and troubleshoot security policy, Terraform, CI/CD and cloud configuration issues.
Translate security requirements into practical technical solutions that development teams can implement.
Provide clear guidance and documentation for security controls, integration patterns and remediation activities.
Act as a technical point of contact for application teams throughout the adoption life cycle.

We are looking for an experienced Senior Cloud Security/DevSecOps Engineer with 10+ years of IT experience and strong expertise in multi-cloud infrastructure, Infrastructure as Code (IaC), CI/CD automation, cloud security and policy-as-code.
Cloud: AWS, Microsoft Azure, GCP
Infrastructure as Code: Terraform
Terraform: Resource deployment, reusable module development and troubleshooting
CI/CD: GitLab CI/CD, Azure DevOps
Automation: Python
Policy as Code: Rego/Open Policy Agent (OPA)
Cloud Security: Azure Policy, AWS SCP, AWS RCP, IAM roles and permissions
CNAPP/CSPM: Wiz, CloudGuard
DevSecOps: Integration of security and policy controls into CI/CD workflows
Troubleshooting: Cloud policy, IaC, pipeline and security control issues
Strong communication and stakeholder-management skills.
Ability to work effectively with both Cyber Security and application development teams.
Strong problem-solving and troubleshooting capabilities.
Ability to explain complex security requirements in simple, practical terms.
Collaborative approach when working with developers, engineers and security stakeholders.
Ability to guide application teams through onboarding and solution adoption.
Strong documentation and knowledge-sharing skills.

1 Hexaware Technologies Uk Limited jobs in England & Wales