Senior Technical Specialist
India
Job Description
Senior Technical Specialist
Hyderabad, Telangana
Job Summary
| Platform Security Engineer / SRE | 2 | Strong experience as a Platform Security Engineer, Cloud Security Engineer, Site Reliability Engineer, Platform Engineer or DevSecOps Engineer in cloud-native environments. Hands-on experience securing cloud-native platforms, preferably GCP and GKE, including identity, IAM, networking, Kubernetes security, workload identity and platform hardening. Experience with secrets management, certificate management, encryption, access controls, service-to-service security, mTLS and runtime security patterns. Good working knowledge of Kubernetes, Istio or service mesh technologies, ingress/egress controls, network policies and secure workload deployment patterns. Experience integrating security controls into operational processes, including monitoring, alerting, vulnerability remediation, incident response, evidence capture and continual improvement. Strong understanding of CI/CD security, policy-as-code, container security, dependency risk, artefact controls and secure software supply chain principles. Experience with Infrastructure as Code, preferably Terraform, and automation to standardise security controls and reduce manual intervention. Ability to work across engineering, SRE, cyber/security, risk, architecture, supplier and operations teams to deliver pragmatic platform controls. |
Banking or core banking platform experience. Experience working with Thought Machine Vault. Experience supporting large-scale distributed systems and business-critical regulated platforms. Experience with GCP Security Command Centre, IAM, KMS, Secret Manager, Vault, Kubernetes admission controls, OPA, container scanning or runtime security tooling. Experience with Dynatrace, OpenTelemetry, GKE, Istio, Apigee, Kafka, Terraform or CI/CD tooling. Understanding of operational resilience, audit, risk, evidence capture and compliance expectations within a regulated environment. |
Key Responsibilities
| GCP Cloud Security Engineering & IAM Management |
| Kubernetes (GKE) Security Engineeri |
| Platform Security |
| Secrets Management & Encryption Engineering |
| Certificate Management & PKI Operations |
| Service-to-Service Security & mTLS Architecture |
| Istio Service Mesh Security & Traffic Governance |
| Network Security Engineering & Kubernetes Network Policies |
| Runtime Security Monitoring & Workload Protection |
| Vulnerability Management & Security Remediation |
| CI/CD Security & Secure Software Supply Chain |
| Policy-as-Code & Security Governance Automation |
| Container Security & Image Governance |
| Infrastructure as Code (Terraform) Security Automation |
| Security Monitoring, Alerting & Incident Response |
| Operational Security & SRE Collaboration |
| Audit Evidence, Compliance & Regulatory Controls |
| Cross-Functional Security Stakeholder Management |
| GCP Security Command Center (SCC) & Cloud Security Operations |
| KMS, Secret Manager & Vault Security Platforms |
| OPA (Open Policy Agent) & Admission Control Security |
| Thought Machine Vault Platform Security |
| Core Banking Platform Security & Regulatory Compliance |
| Dynatrace/OpenTelemetry Security Observability |
| Apigee API Security & Gateway Governance |
| Kafka Security & Event Platform Protection |
| Operational Resilience, Risk & Control Assurance |
Skill Requirements
Other Requirements
Information at a Glance