Website:
dsksolutions.net
Job details:
About usWe are a UK and India-based technology consultancy delivering IT strategy, architecture, and programme management for Tier 1 and Tier 2 enterprises across Spacetech, Telecommunications, Retail, Financial services and Utilities. Our clients include global satellite operators and major UK telecoms and retail brands, and our work is built on industry standards including TM Forum ODA, MEF, TOGAF, and ARTS. This role sits on our India delivery team, working directly with UK-based enterprise clients on live production systems.
Role summaryWe're looking for a Cloud Security Engineer to secure production cloud infrastructure for our UK enterprise clients — designing and enforcing identity, network, and data-protection controls across AWS/Azure environments, and closing the gap between fast-moving DevOps delivery and the security posture our clients' compliance and audit teams require. You'll work alongside our existing DevOps delivery team, embedding security into the pipeline rather than gatekeeping it at the end.
Key responsibilities• Design and implement cloud security architecture (IAM, network segmentation, encryption at rest/in transit, key management) across AWS and/or Azure production environments.
• Own security posture management — configure and tune cloud-native tools (AWS Security Hub, GuardDuty, Azure Defender, Azure Sentinel) and drive remediation of findings to closure.
• Define and enforce least-privilege IAM policies, service roles, and access reviews across multi-account/subscription estates.
• Partner with the DevOps team to embed security scanning (SAST/DAST/container image scanning, IaC scanning) into CI/CD pipelines.
• Lead cloud security architecture reviews for new infrastructure and application changes before they reach production.
• Support incident response for cloud security events — triage, containment, and post-incident hardening recommendations.
• Maintain evidence and documentation to support client audits (ISO 27001, SOC 2, Cyber Essentials Plus) without owning the audit relationship itself.
• Keep infrastructure security configuration in Terraform/IaC, never manual console changes, so every control is version-controlled and reviewable.
• Communicate risk and remediation priorities clearly to both engineering teams and non-technical client stakeholders.
What we're looking forRequired
• 5-8 years in cloud security or security-focused DevOps/SRE roles, with 2+ years at senior/lead level owning security architecture decisions.
• Deep, hands-on expertise in one major cloud platform's security tooling (AWS or Azure) — not surface-level familiarity with several.
• Strong IAM design experience: role-based access, federation, least-privilege policy authoring, secrets management (Vault, AWS Secrets Manager, Azure Key Vault).
• Working knowledge of network security controls in cloud environments — security groups, NACLs, private endpoints, WAF, segmentation.
• Experience embedding security into CI/CD (shift-left scanning, policy-as-code — e.g. OPA, Sentinel, Checkov).
• Terraform or equivalent IaC experience, specifically for security-relevant resources (IAM, KMS, networking).
• Familiarity with a recognised security framework (ISO 27001, NIST CSF, CIS Benchmarks) at a practitioner level.
• Excellent written and spoken English — this is a client-facing role with no intermediary.
• Comfortable working a 1pm-10pm IST overlap window to align with UK client hours.
Nice to have
• A recognised cloud security certification (AWS Security Specialty, Azure Security Engineer Associate, or equivalent).
• Exposure to container/Kubernetes security (pod security standards, image signing, runtime protection).
• Experience supporting a live ISO 27001 or SOC 2 audit cycle from the technical/evidence side.
• Familiarity with SIEM tooling and writing/tuning detection rules.
• Prior experience in telecoms, financial services, or regulated-sector environments.
What we offer• Direct exposure to UK enterprise clients and live production security decisions — not a back-office ticket queue.
• A senior, embedded role within a small, high-trust delivery team, not a large offshore bench.
• Clear path to broaden into architecture and client-facing advisory work as you prove out the engagement.
• Remote-first, India-based role with fixed UK-overlap hours.
• An above-industry-average package for working directly with top-tier UK clients.
Practical detailsHow to apply
Please send your CV, current CTC, notice period, and a short answer to the following screening question to recruitment@dsksolutions.net: Describe a time you found a real security gap in a cloud environment that automated scanning tools missed — how did you find it, and what did you do about it?
Click on Apply to know more.
