Cloud Infrastructure Compliance Engineer

Position Overview

We are seeking a Cloud Infrastructure Compliance Engineer with 2-5 years of experience to manage compliance programs and security governance across our Azure & GCP cloud infrastructure. This role focuses on ensuring continuous compliance with industry standards, conducting security control validations, and maintaining audit readiness. The ideal candidate will bridge technical security implementation and compliance requirements while working with auditors, security teams, and infrastructure stakeholders.

Key Responsibilities

• Lead compliance assessments across Azure infrastructure for PCI DSS, ISO 27001, SOC 2, and other applicable frameworks
• Support audits through evidence collection, control documentation, and audit trail maintenance; track remediation activities to closure
• Conduct regular security configuration reviews across Azure services (VMs, Kubernetes, Storage, Cosmos DB, Redis, VM Scale Sets)
• Perform Network Security Group (NSG) and Firewall rule set assessments; validate encryption (CMEK), Key Vault configurations, and Defender for Cloud findings
• Utilize Azure Resource Graph and Wiz platform for security posture assessments and compliance monitoring
• Configure and maintain Datadog dashboards and alerts for compliance monitoring and audit visibility
• Develop Terraform templates embedding compliance requirements and security controls into infrastructure deployments
• Collaborate with DevOps and Security teams to integrate compliance controls into workflows and address governance gaps

Required Experience & Knowledge:

• Proven experience of a minimum of 2-5 years working on compliance programs in cloud environments with demonstrated knowledge of PCI DSS, ISO 27001, or SOC 2
• Hands-on experience with Azure compliance services: Azure Policy, Defender for Cloud, Azure Resource Graph, and Compliance Manager
• Experience with Terraform for infrastructure-as-code and compliance automation
• Understanding of encryption controls (CMEK), Key Vault, Azure NSGs, Azure Firewall, and Cloudflare WAF
• Basic scripting capabilities (PowerShell, Python, or Bash) for compliance automation

BE/BTECH in Information Technology, Computer Science, or a related field.

Preferred Certifications:

• Azure security or compliance certifications (AZ-500, SC-100)
• Knowledge of additional compliance frameworks (HIPAA, FedRAMP, GDPR, CCPA)