Senior Domain Manager Cloud

Job description

**Job Purpose** To design, implement, operate, and govern enterprise-grade encryption key management, secrets management, and vault platforms across multi-cloud environments including Azure, AWS, GCP, Oracle Cloud, and IBM Cloud. The role involves supporting day-to-day cloud operations, resolving escalated issues, assisting in large-scale cloud migrations, and ensuring performance, security, and reliability of mission-critical workloads hosted on Azure. **Duties and Responsibilities** A-Minimum required Accountabilities for this role B-Additional Accountabilities pertaining to the role **Major Challenges** - Managing consistent encryption and secrets strategy across five different cloud providers - Ensuring high availability and lowlatency access to vault services for missioncritical workloads - Handling key rotation and zerodowntime secrets updates for production systems - Meeting strict regulatory and audit requirements in financial services - Securing secrets across diverse runtimes: VMs, containers, Kubernetes, serverless, and legacy systems - Coordinating with multiple teams under tight delivery and security SLAs **Required Qualifications and Experience** a)Qualifications - Bachelors degree in Computer Science, Information Technology, Cybersecurity, or related field - 710 years of overall IT experience with 5+ years in Cloud Security / Key Management b)Work Experience Key Management Cryptography Strong handson experience with: - Azure Key Vault Managed HSM - AWS KMS CloudHSM - GCP Cloud KMS - OCI Vault - IBM Key Protect - Understanding of encryption algorithms, TLS, certificates, PKI, asymmetric/symmetric cryptography - CMK, BYOK, HYOK, envelope encryption patterns - Secrets Vault Management - Secrets lifecycle management for: Database credentials - API keys, tokens, certificates - Application and platform secrets - HashiCorp Vault architecture, HA setup, and integrations (preferred) Cloud Platform Integration - Kubernetes secrets integration (AKS, EKS, GKE, OKE) - Secure CI/CD integrations (Azure DevOps, Jenkins, GitHub Actions) - IAM, RBAC, workload identity, and leastprivilege access Automation DevSecOps - Infrastructure as Code using Terraform - Automation using Python, PowerShell, Bash - Policy as Code and security guardrails Monitoring, Audit Compliance - Key usage logging, audit trails, alerting - Compliance mapping for PCIDSS, ISO, SOC2, RBI guidelines - Incident management and root cause analysis (RCA)