SRE Consultant

We are looking for an SRE Consultant with strong experience in cloud platforms, automation, infrastructure as code, and CI/CD. The role involves building and operating secure, reliable, and compliant cloud platforms across AWS and Azure.

Responsibilities:

• Enforce and monitor cloud security and reliability baselines.
• Build automation for security, compliance, and remediation.
• Improve visibility across the cloud estate.
• Enable CNAPP adoption through Terraform and CI/CD integration.
• Integrate shift-left security into development and deployment pipelines.
• Build serverless remediation workflows.
• Implement governance using Azure Policies and AWS SCPs.
• Develop Kubernetes-native integrations for secure orchestration.
• Support cloud risk assessments and audit-readiness activities.
• Collaborate with cloud, security, DevOps, and engineering teams.
• Contribute to cloud security posture and operational reporting.
• Develop automation using Python and Bash/Shell scripting.
• Work with AWS and Azure cloud platforms.
• Implement and manage AWS SCPs, Lambda, Config, IAM, and KMS.
• Work with Azure Policy, Azure Functions, Defender, and Key Vault.
• Develop modular infrastructure as code using Terraform.
• Work with Crossplane for Kubernetes-native cloud resource orchestration.
• Integrate security and reliability checks into CI/CD pipelines.
• Work with GitHub Actions, GitLab CI, and Azure DevOps.
• Implement security quality gates for vulnerabilities, misconfigurations, and policy violations.
• Support Shift-Left Security across the SDLC.
• Build automated remediation workflows using AWS Lambda and Azure Functions.
• Develop scripts for cloud metadata extraction, alerting, compliance, and remediation.
• Enforce and monitor security and reliability baselines across cloud platforms.
• Improve cloud security posture and observability.
• Support cloud risk assessments and audit-readiness activities.
• Support the onboarding and adoption of CNAPP solutions.

Requirements:

• Programming and Scripting: Python, Bash/Shell, YAML/JSON.
• Cloud: SCPs, Lambda, Config, IAM, KMS (AWS), Azure Policy, Functions, Defender, Key Vault (Azure).
• Infrastructure as Code: Terraform, Crossplane.
• DevOps / SRE: CI/CD, GitHub Actions / GitLab CI / Azure DevOps, cloud automation, observability and monitoring, reliability engineering.
• Security: Cloud security posture management, security quality gates, vulnerability and misconfiguration checks, shift-left security, compliance and governance, Automated remediation.
• Good to Have: CNAPP tools, GitHub Advanced Security / secret scanning, Kubernetes security, ArgoCD / GitOps, AWS GuardDuty, Microsoft Defender, REST API development and integration, cloud provider API consumption, OAuth 2.0 / OpenID Connect / SAML, Secure API practices.