Cloud Security Architect Secrets Management & Key Vault

Role: Cloud Security Architect Secrets Management & Key Vault Exp: 5+ years Location : Hyderabad, Bangalore, Chennai, Greater Noida Notice: Immediate to 60 days Role Overview The Cloud Security Architect will design and implement secure architectures for secrets management, encryption key lifecycle, and cloud security across AWS and Azure environments. This role focuses on integrating HashiCorp Vault, Azure Key Vault, and related technologies to ensure robust data protection and compliance. Key Responsibilities Architecture & Design Define and implement enterprisegrade secrets management solutions using HashiCorp Vault, AWS KMS, and Azure Key Vault. Develop secure architectures for multicloud environments (AWS, Azure) with strong emphasis on Zero Trust and least privilege principles. Create highlevel and lowlevel design documents for key management and encryption workflows. Secrets & Key Management Manage lifecycle of cryptographic keys (create, rotate, revoke) across hybrid environments. Implement PKI, certificate authority functions, and secure SSH access. Integrate Vault with CI/CD pipelines and DevOps tools (Terraform, Ansible, Jenkins). Cloud Security Design secure cloud architectures leveraging AWS IAM, Azure AD, and rolebased access control. Implement Infrastructure as Code (IaC) for secure deployments using Terraform and Azure Resource Manager templates. Ensure compliance with FIPS 140-2, GDPR, and other regulatory standards. Operational Excellence Configure monitoring and alerting for secrets management systems. Conduct vulnerability assessments and remediation for cloud and onprem environments. Provide guidance on disaster recovery and high availability for key vault systems. Required Skills & Experience 516 years in cybersecurity and cloud architecture. Handson experience with HashiCorp Vault, Azure Key Vault, and AWS KMS. Strong knowledge of PKI, encryption standards (AES, RSA), and identity management. Proficiency in scripting (PowerShell, Bash) and automation tools. Certifications preferred: HashiCorp Certified: Vault Associate Microsoft Certified: Azure Security Engineer Associate AWS Certified Security Specialty CISSP or CCSP Desired Skills Experience with hybrid deployments and multiregion replication. Familiarity with container orchestration (Kubernetes) and microservices security. Strong communication and stakeholder engagement skills. .