ROLE_DESCRIPTION
Policy & Compliance Design: Create and maintain automated governance frameworks using tools like Azure Policy, AWS Config, or Google Cloud Platform Organization Policies.
Infrastructure as Code (IaC): Build and manage reusable Terraform, ARM, or Bicep templates for compliant landing zones.
Identity & Access Management (IAM): Configure Role-Based Access Control (RBAC), least-privilege permissions, and enterprise directory integration.
Cloud Account Lifecycles: Provision, baseline, and monitor cloud accounts, subscriptions, or projects to ensure continuous compliance.
Cost & Resource Optimization: Track cloud spend, enforce tagging strategies, and implement resource-cleanup guardrails.
Monitoring & Auditing: Integrate cloud security posture management (CSPM) tools and monitoring dashboards to detect drift or policy violations.
Typical Requirements & Qualifications
Experience: Generally 3 to 7+ years of experience in cloud infrastructure, DevOps, or systems engineering (with senior/lead roles requiring 5–7+ years).
Cloud Platforms: Hands-on experience with AWS, Microsoft Azure, or Google Cloud Platform (often multi-cloud).
Scripting & IaC: Proficiency in Terraform, Python, Bash, or PowerShell.
Frameworks & Standards: Familiarity with enterprise compliance frameworks (such as SOC2, ISO 27001, HIPAA, or federal IT standards like FITARA).
Certifications: Cloud-specific security or architecture certifications (e.g., AWS Certified Security / Solutions Architect, Azure Solutions Architect Expert, or Google Cloud Platform Professional Cloud Architect.