01Overview
The Apex Group was established in Bermuda in 2003 and is now one of the worlds largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.Your career with us should reflect your energy and passion. Thats why, at Apex Group, we will do more than simply empower you. We will work to supercharge your unique skills and experience. Take the lead and well give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities. For our business, for clients, and for you APEX FUND SERVICES IS CURRENTLY HIRING Corporate Title: Senior Security Engineer Cloud & Infrastructure Location: India, Pune Baner About Apex The Apex Group is a global financial services provider with over 10,000 staff across 50+ offices worldwide. At Apex, every employee contributes to our success. As we continue to grow, we seek bright, motivated individuals who thrive on challenges and want to be part of a dynamic, global team. The Role As a Senior Security Engineer Cloud & Infrastructure, you will be responsible for designing, implementing, and managing security controls across Apex's global cloud and infrastructure environments. The role spans cloud security, network security, identity and access management, endpoint protection, and infrastructure security, with a strong focus on enabling the secure integration of acquired companies, platforms, applications, and infrastructure into the Apex ecosystem. You will work closely with infrastructure, architecture, engineering, and M&A teams to ensure security is embedded throughout the technology lifecycle. Key Responsibilities Deploy, configure, and manage security solutions across cloud (AWS, Azure, OCI) and on-premises infrastructure. Implement and maintain controls for network security, IAM, endpoint protection, and cloud governance. Support the secure design and integration of hybrid, multi-cloud, and acquired-company environments. Conduct security assessments, vulnerability analysis, configuration reviews, and remediation across cloud, infrastructure, and newly acquired technology assets. Collaborate with platform, infrastructure, and application teams to embed security into solutions from design to operation. Monitor for and respond to security incidents affecting cloud and infrastructure services. Maintain documentation including architecture diagrams, security control mappings, and operational procedures. Research and recommend new technologies, tools, and practices to enhance security posture. Ensure compliance with relevant frameworks and internal security standards, including NIST, ISO 27001, CSA CCM, and applicable regulatory expectations. Lead security assessments and integration planning for mergers and acquisitions, including cloud platforms, infrastructure, identity, network connectivity, endpoint controls, and third-party integrations. Drive remediation of inherited security risks identified during acquisition due diligence, onboarding, or post-integration reviews. Partner with infrastructure, cloud, IAM, application, architecture, and risk teams to define secure integration patterns and operational handover requirements. Areas of Focus Deploy, configure, and manage security controls for AWS, Azure, and OCI environments. Implement cloud-native security controls including Security Groups, IAM policies, KMS, and encryption. Integrate and manage CSPM and CWPP tools to monitor and enforce cloud security posture. Enforce least privilege and Zero Trust principles across cloud accounts and subscriptions. Lead security due diligence, integration planning, and security control implementation for mergers and acquisitions, including system onboarding, identity consolidation, network integration, cloud migrations, third-party connectivity, and remediation of inherited risks. Define secure integration patterns for acquired companies, including segmentation, privileged access, logging, monitoring, endpoint security, and data protection controls. Support secure connectivity between Apex-managed endpoints, acquired-company environments, data centres, cloud platforms, and business-critical applications. Contribute to security architecture reviews for infrastructure changes, migrations, and transformation initiatives. Implement and manage Microsoft 365 security baselines, Conditional Access, and Intune compliance. Harden operating systems, containers, and virtual machines following best practices. Design and maintain secure network architectures for hybrid and multi-cloud connectivity. Configure firewalls, WAFs, VPN gateways, and
