• Perform systems administration and maintenance including patching, vulnerability scanning, compliance scanning and remediation, backups, and recovery for cloud workloads. • Support multi-cloud environments (AWS, Azure, GCP), including Windows and Linux EC2 instances, container workloads, and services such as EC2, EBS, S3, RDS, WorkSpaces, and Active Directory and equivalent services in other CSPs. • Configure, update, and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring. • Troubleshoot issues across network, compute, application, and identity layers by reviewing logs, collecting data, and analyzing system behavior. • Implement hardening and compliance controls using CIS Benchmarks, DISA STIGs, and FedRAMP requirements. • Remediate vulnerabilities identified by tools such as Tenable, Trivy, OpenSCAP, Anchore, Twistlock, and others. • Provide quality assurance feedback during system deployments to ensure architecture meets compliance and operational requirements. • Collaborate with Security Analysts to ensure uninterrupted delivery of security services to customers. • Create and maintain documentation including network diagrams, dataflow diagrams, SOPs, and security tool configuration guides. • Support client communications, deliverables, and issue resolution with strong verbal and written communication skills. • Support and mentor junior engineers as and when required. • Serve as primary or backup on-call engineer during assigned rotation. • Respond to after-hours security alerts, infrastructure incidents, outages, and ConMon events. • Document incidents, actions taken, and recommended improvements.