Senior Cloud Security Engineer

Job Description: Cloud Security Engineer
Reports to: Security Lead
Level: Mid (IC)
Mission
Own the identity, access, and network security control plane — CyberArk, Zscaler and Cloudflare — for a fast-scaling, AI-driven insurance infrastructure org. You'll take these tools from initial deployment handoff to steady, auditable, day-2 operations, and be the technical backbone the Security Lead relies on for privileged access and network security posture.
What you'll own
CyberArk (PAM) — safe/policy design, privileged account lifecycle, credential rotation monitoring, access recertification
Zscaler (SSE) — policy tuning, app onboarding, exception handling
Cloudflare (WAF/CDN, and Zero Trust/Access if applicable) — rule tuning, DNS, edge security posture
Key responsibilities
Take over day-2 administration of CyberArk from the implementation partner; ensure clean runbooks/SOPs exist and are maintained
Run privileged access onboarding/offboarding and periodic access recertification, feeding evidence to the GRC Analyst for audit cycles
Own Zscaler and Cloudflare policy baselines; manage exceptions without degrading security posture
Partner with engineering teams as headcount scales to keep IAM and network controls usable, not just secure
Support technical deep-dives requested by auditors or pen testers on identity/network architecture
Identify opportunities to automate policy-drift detection and routine PAM/SSE administration, in line with the team's AI-driven, lean operating model
Escalate control-design questions or audit findings on these tools to the Security Lead
What we're looking for
3–6+ years in security engineering, with hands-on ownership of at least one PAM platform (CyberArk strongly preferred) in production
Working experience with a cloud SSE/ZTNA platform (Zscaler, Cloudflare Access, or similar) and a CDN/WAF
Comfortable being the sole owner of high-scrutiny controls in an audited environment (SOC 2, ISO 27001, or similar)
Strong scripting/automation ability (Python, Terraform, or similar) to keep a lean team's operational load sustainable
Clear written communication — you'll produce evidence and explanations auditors and pen testers can follow
Nice to have
Insurance, financial services, or other regulated-industry background
Experience standing up or maturing a PAM program from a fresh implementation
Exposure to NAIC Insurance Data Security Model Law or similar state insurance regulatory frameworks
How we'll know you're succeeding
CyberArk, Zscaler, and Cloudflare pass audit control tests with minimal findings
Privileged access recertification completed on schedule every cycle
No unplanned production impact from policy changes across owned tools
Routine administration increasingly automated rather than manual quarter over quarter
Location: Mumbai - UI, Mumbai, Maharashtra, India

Work arrangement
No