Promaynov Advisory Services Pvt. Ltd
Website:
promaynov.com
Company:
https://www.linkedin.com/company/promaynov
Seniority: Not Applicable
Industries: Staffing and Recruiting
Job details:
Cloud Engineering Role
Job Title
Senior Engineer
Team
Platform Security
Service Line Information
Technology services the broader Firm through delivery of core technology and managed services capabilities, collaboration and innovation development services and building our Alliances network.
Job Description
The Team
Cloud Engineering supports the firm by delivering modern platform capabilities, observability services, and engineering enablement across distributed systems. The Platform Security team safeguards cloud platforms by implementing secure‑by‑default patterns, enforcing guardrails, and supporting threat detection, response, and continuous security improvement across digital services.
Key Responsibilities
Technical Leadership
- Provide guidance to engineers on secure cloud configurations, secret management, identity governance, and platform guardrails.
- Lead security onboarding for new services, ensuring alignment with secure‑by‑default patterns.
Policy, Governance & Access Control
- Develop and refine security policies, baseline configurations, and platform governance controls.
- Manage and review access control models including RBAC, privileged access, automation identities, and workload identities.
- Oversee automated policy checks and compliance monitoring.
DevSecOps & SDLC Security
- Embed security scanning, image validation, dependency checks, IaC scanning, and code signing into CI/CD workflows.
- Create reusable DevSecOps templates for teams to adopt (pipeline templates, scanning configs, signing steps).
IaC Review & Secure Architecture
- Lead reviews of Terraform modules to ensure secure configurations and alignment with guardrails.
- Contribute to secure architecture patterns for networking, identity, and workload isolation.
Threat Detection, IR & Automation
- Enhance detections, rule sets, and response playbooks for cloud threat intelligence signals.
- Participate in incident response activities, supporting containment and root cause analysis.
- Build automation to support access reviews, remediation workflows, and compliance reporting.
Stakeholder Engagement & Enablement
- Work closely with product, observability, SRE, and platform engineering teams to embed security early in design.
- Deliver training, guidance, and best‑practice documentation.
- Manage relationships with stakeholders to become a trusted partner.
- Lead by example by living by Our Values and embracing our culture
Shift Responsibilities & Operational Support
- Work in rotational shifts as required.
- Participate in on‑call rotations to respond to and resolve high‑severity incidents in a timely manner.
The Person
- Strong hands‑on experience in cloud security engineering and DevSecOps.
- Skilled in IaC assessment, policy‑as‑code, scanning tools, and secure architecture.
- Extensive knowledge of CI/CD pipelining skills using Azure DevOps or equivalent.
- Proficient in scripting/automation languages (PowerShell, Python, Bash).
- Familiar with threat detection, cloud forensics, and incident response processes.
- Effective communicator able to influence engineering teams to adopt secure‑by‑default practices.
- Strong sense of ownership and problem‑solving abilities and commitment to raising engineering standards.
Click on Apply to know more.
