Kotak Mahindra Bank Limited is Looking for IT Team MemberSUPPORT SERVICESInformation Risk Management Team Full Time

The Cloud Infrastructure Solutions Automation – Security Engineer role is involved in day-to-day L3 operations, tracking and ensuring implementation of new projects, analysis of new needs from platform teams, take part in technical discussions, suggest best practices in development and operations area including best security practices, mentor and train junior engineers and contribute to the knowledge base.
Role description:

• Provide hands-on technical security engineering and security expertise in the analysis, assessment, development, and evaluation of security solutions and architectures to secure systems in the cloud (AWS, Azure or GCP).
• Considering holistically approach lay down area to implement Security solutions through people process technologies across cloud platforms and prioritize based on the risk criteria and continuously evaluate cloud platforms for new services/new emerging technologies to understand new security requirements with knowledge of security principles and techniques on how to secure cloud environments
• Plan , implement and maintenance of cloud security solutions/processes (AWS, Azure, Google Cloud, Private Clouds)
• Creation of automated tooling for cloud platforms – software development
• Develops and maintains cloud security standards in partnership with the governance team
• Automate remediation and implement controls to avoid misconfiguration and keep compliance
• Creates and maintains IaaCCaaC to support the team in automation capabilities
• Works with the architecture and operations teams to automate and address security concerns
• Documents and prepares Standard Operating Procedures based on security architecture
• Create, update, and maintain knowledge base
• Identifies, analyses, and permanently fixes repeat incidents (problem management)
• Contributes to the development of automations to ensure quality of delivery and remove human intervention
• Follow-up and coordinate with other cross-functional teams – network, infra & security teams
• Handles multiple critical projects along with daily tasks
• Creates security policies to guardrail and keep our Cloud Environments secure

Key competencies:

• Technical proficiency in AWS and Azure including solution architecture
• Experience with AWS, Azure, Google Cloud Platform
• Cybersecurity in Cloud – securing overall cloud environments by applying cybersecurity tools and best practices
• Knowledge of Cloud Security Alliance framework
• Knowledge on security concepts (data, network and cloud security)
• Knowledge and/or experience of cloud security provider solutions, e.g. AWS security solutions, Azure security solutions, GCP security solutions
• Implementation of security features like AWS Security Hub – GuardDuty
• Expertise in Cloud automation (Ansible, Ansible Tower, Terraform, Cloud Formation, Python, etc)
• Expertise in advanced automation skills using bash, python, perl, powershell, etc
• Expertise using containers and serverless computing (Docker, Kubernetes etc)
• CI/CD pipeline tools such as Jenkins or GitHub Actions.
• Expertise in various flavours of Linux
• Integrating events with the SOC, playbooks etc
• Technical writing experience
• Fluent written and spoken English
• Good understanding of networking, tcp/ip, vpn, dns, lanwan concepts

Nice to have:
. Certification in AWS, Azure, GCP
. Scripting/ programming experience: Python, Docker, Ansible
. Experience in Cybersecurity area: access control