Security Engineer
CDK Global15 days ago
Hyderābād, IndiaSenior
Responsibilities
- Define a multi-year cloud security roadmap and align technical debt reduction with business velocity.
- Provide technical leadership to the Security Center of Excellence and align Security Champions with platform engineering goals.
- Define security KPIs such as MTTR, policy coverage, and identity risk scores for executive governance.
- Architect and govern multi-tenant cloud environments using landing zone patterns and global security guardrails.
- Design Zero Trust identity and networking architectures using Conditional Access, Just-In-Time elevation, Privileged Identity Management, Workload Identity Federation, and private connectivity.
- Implement policy-as-code governance, hardened Infrastructure-as-Code modules, and automated infrastructure drift detection and remediation.
- Develop event-driven automation, SOAR playbooks, CI/CD security gates, IaC scanning, and container analysis.
- Build security automation and scripting to reduce manual work and mean time to remediate platform vulnerabilities.
Requirements
- 4+ years of experience in Infrastructure or Security Engineering with deep architectural experience in Azure Enterprise environments.
- Experience designing and implementing Zero Trust identity frameworks using Microsoft Entra ID, Privileged Identity Management, Conditional Access, and Workload Identity Federation.
- Ability to architect security-by-design patterns across the full infrastructure resource lifecycle.
- Expert proficiency with Terraform, including module development and provider management, plus cloud-native templates such as Bicep, ARM, or AWS CloudFormation.
- Proficiency with Python, Go, or PowerShell for security tooling, automation, and API integrations.
- Experience with policy-as-code frameworks such as OPA, Rego, and Azure Policy.
- Hands-on experience architecting security gates and automated scanning in GitHub Actions or Azure DevOps pipelines.
- Experience leading large-scale cross-functional technical initiatives and mentoring engineers within a Security Center of Excellence.
- Familiarity with the Microsoft Cloud Adoption Framework and Well-Architected Frameworks.
- Extensive experience securing Kubernetes and containerized workloads, including service mesh and admission controllers.
- Professional-level certifications such as AZ-500, SC-100, CISSP, or CCSP are desired.
- Experience with enterprise-scale CNAPP, XDR, or SOAR solutions such as Palo Alto/Cortex or Microsoft Sentinel is desired.
About CDK Global
CDK Global builds software for automotive and other vehicle dealerships, including dealer management systems, CRM, service and parts, and digital retailing and advertising tools. It sells subscriptions and integrations used by dealers to run sales, F&I, and fixed operations across North America and internationally. The company was spun off from ADP in 2014 and is headquartered in Hoffman Estates, Illinois; it was acquired by Brookfield Business Partners in 2022 and taken private.