---
title: 'Senior Security Consultant – Cisco ISE with AWS Cloud Architecture at Gruve'
canonical: 'https://feeny.ai/job/senior-security-consultant-cisco-ise-with-aws-cloud-architecture-gruve-pune-r2y0mn11bv7j'
type: 'job'
last_seen: '2026-09-16'
---

# Senior Security Consultant – Cisco ISE with AWS Cloud Architecture at Gruve

- **Company:** Gruve
- **Location:** Pune, India
- **Posted:** 2026-09-16
- **Last confirmed live:** 2026-09-16
- **Apply:** https://gruve.ai/careers/?gh_jid=5424235008

## Job description

## About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position Summary

AWS Cloud Architect responsible for designing, building, and owning the complete AWS foundation for Gruve's Cisco ISE-as-a-Service (ISEaaS) multi-tenant managed service, with 8+ years of experience in cloud infrastructure and network security environments. Owns the AWS Organization and multi-account landing zone, tenant network architecture, security guardrails, Infrastructure-as-Code, and cloud cost management. This is a hands-on build role: the successful candidate will personally author Terraform modules and design the account structure that every customer tenant is provisioned from, while applying reliability engineering practices to reduce operational toil. Working knowledge of Cisco ISE, RADIUS, and enterprise network security concepts.

## Key Responsibilities

- Design and implement multi-account AWS Organization structure, including Organizational Units (OUs), management account separation, and consolidated billing.
- Design and enforce Service Control Policies (SCPs) and organization-level guardrails for tenant isolation and compliance.
- Design tenant network architecture: VPC, multi-AZ subnet design, route tables, VPC endpoints, NAT, DNS (Route 53 private zones including PTR records), and IP address management (IPAM).
- Implement AWS Transit Gateway hub-and-spoke connectivity with per-tenant route tables, Site-to-Site VPN, and Direct Connect.
- Implement AWS security services: IAM and IAM Identity Center (SSO), KMS customer-managed keys, CloudTrail, AWS Config, GuardDuty, and Security Hub.
- Own cloud cost management and FinOps: per-tenant cost attribution, tagging strategy, budget alerts, Cost Explorer and CUR-based chargeback reporting, and cost modeling to support service pricing and margin analysis.
- Design for high availability and disaster recovery across Availability Zones and regions, including backup, restore, and recovery runbooks.
- Apply reliability engineering practices: automation-first operations, toil reduction, failure-mode analysis, and infrastructure observability.
- Implement policy-as-code and security scanning in CI/CD pipelines (Checkov, tfsec, or equivalent).
- Partner with automation and ISE engineering teams to ensure infrastructure outputs integrate cleanly with configuration management.
- Subscribe to and manage the Cisco ISE AMI listing on AWS Marketplace per Region, including EULA acceptance and AMI version/release validation before each tenant build.
- Verify and manage AWS service quotas (EC2 instance types, EIPs, VPC limits) per Region/tenant.
- Configure Network ACLs and manage Elastic IP allocation policy (use only where explicitly required; avoid public exposure of ISE by default).
- Enable VPC Flow Logs for tenant VPCs/subnets where required by security or compliance standards.
- Configure EC2 instance metadata options (IMDSv2) and other instance-level hardening attributes.
- Own EC2 user-data / bootstrap configuration for the ISE AMI (hostname, management IP, NTP, DNS) so it hands off cleanly into the Platform Automation Engineer's post-bootstrap automation.
- Define NTP source design for ISE nodes alongside the existing DNS/Route 53 designs.
- Own the end-to-end AWS infrastructure validation checklist (EC2, EBS, security groups, routing, DNS, NTP, IAM, encryption, monitoring) at each tenant go-live.

## Basic Qualifications

- 8+ years of experience in cloud infrastructure, platform engineering, or cloud architecture roles.
- Demonstrable experience designing and building a multi-account AWS Organization or landing zone from the ground up.
- Strong hands-on Terraform experience — candidates should be able to describe modules they have personally authored.
- Solid understanding of AWS networking, including Transit Gateway, VPN, and hybrid connectivity to on-premises environments.
- Experience with cloud cost management, tagging strategy, and cost attribution in multi-tenant or managed service environments.
- AWS Certified Solutions Architect - Professional preferred; AWS Advanced Networking or Security specialty certifications an advantage.
- Experience in a managed services provider (MSP), multi-tenant SaaS, or hosted service environment is highly desirable.
- Familiarity with Cisco ISE, NAC, or enterprise network security concepts is an advantage.
- Strong documentation, design communication, and cross-team collaboration skills.

## Preferred Qualifications

- AWS Core: AWS Organizations, Control Tower, Account Factory, Service Control Policies (SCPs), IAM, IAM Identity Center (SSO), EC2, EBS, S3, KMS, Secrets Manager, Systems Manager (SSM), CloudWatch.
- AWS Networking: VPC, Subnets, Route Tables, Transit Gateway, Site-to-Site VPN, Direct Connect, Route 53, VPC Endpoints, NAT Gateway, IPAM.
- Infrastructure as Code: Terraform (module authoring, remote state, workspaces), Git, CI/CD pipelines, policy-as-code (Checkov / tfsec / Sentinel).
- Security & Governance: CloudTrail, AWS Config, GuardDuty, Security Hub, KMS key policies, least-privilege IAM design, multi-tenant isolation patterns.
- Cloud Financial Management: Cost Explorer, Cost and Usage Report (CUR), tagging strategy, budgets and alerts, per-tenant chargeback and cost modeling.
- Scripting & Automation: Python, Bash, PowerShell (any one or more), REST API integration.
- Familiar with Technologies: Cisco ISE, RADIUS / RADSec, 802.1X, Ansible, Azure, Kubernetes.

## Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.

## About Gruve

## Company Overview
- **One-liner**: Gruve provides AI-native cybersecurity, infrastructure, and data services that help enterprises deploy and secure AI at scale.
- **Entity Type**: Private (Series A, Seed stage)
- **Headquarters**: Redwood City, California, United States
- **Founded**: 2024
- **Founders**: Tarun Raisoni (CEO, Co-Founder)

## Core Business
- **Industry**: IT Services and IT Consulting; AI Security & Infrastructure
- **Target Customers**: Large enterprises (B2B), including those in regulated industries requiring private AI deployment and advanced security operations.
- **Mission / Purpose**: Enable scalable, secure, and measurable AI execution in production by delivering an AI-native approach to enterprise services.

## Products & Services
- **PulseAI**: A private AI infrastructure platform that enables enterprises to deploy generative AI on-premises, in the cloud, or in hybrid environments – production-ready in under two weeks. (SaaS/infrastructure)
- **AI SOC**: An AI-driven Security Operations Center that combines AI detection, automated investigation, and intelligent response to improve security team efficiency and reduce risk. (Managed service/SaaS)
- **Digital Forensics & Incident Response**: Structured methodologies for preserving evidence, investigating incidents, and accelerating recovery. (Service)
- **Enterprise AI Transformation Services**: Consulting and implementation services including data science, Kubernetes SRE, forward deployment engineering, and AI solution architecture. (Professional services)

## Market Standing
- **Valuation**: Not disclosed
- **Total Funding**: USD $57.5 million (across Seed and Series A rounds)
- **Key Investors**: Mayfield Fund (lead in Series A), Xora Innovation (lead in prior round)
- **Notable Acquisitions**: SecurView (July 2024), NetServ (September 2024), Lumos (October 2024)
- **Growth Signals**: 120.3% YoY employee growth (from ~134 to 413 employees); operations across 9 countries; featured in Cybersecurity Insiders on AI agent governance.

## Competitive Advantages
- **AI-Native Architecture**: Unlike legacy stacks built for static software, Gruve designs for dynamic AI workloads (probabilistic decisions, context retrieval, autonomous actions).
- **Speed to Scale**: Claims 500MW+ of distributed edge AI inference capacity and a 30% cost advantage over alternatives.
- **Integrated Security & AI**: Combines private AI infrastructure (PulseAI) with an AI-powered SOC, covering the entire lifecycle from deployment to defense.
- **Talent & Expertise**: Team draws from top firms (Cisco, IBM, Infosys) and includes deep Kubernetes, data science, and cybersecurity specialists.

## Strategic Focus
- **Private AI Deployment**: Helping enterprises keep AI workloads on their own infrastructure to maintain data ownership, governance, and security.
- **AI Security Governance**: Developing solutions to govern AI agents as a new attack surface, as highlighted in their recent thought leadership.
- **Global Expansion**: Operating in 9 countries (US, India, South Korea, UAE, Singapore, Japan, Saudi Arabia, Germany, Canada) with plans to scale further.
- **Partner Ecosystem**: Working closely with hyperscalers (noted VP of Hyperscaler Solutions) and achieving Red Hat advanced tier partner status.

## Why Work Here
- **High Growth Environment**: Headcount more than doubled in the past year, offering rapid career progression and the chance to shape a young company.
- **Culture of Trust**: Core values include giving trust from day one, constructive feedback, and a championship mindset.  
- **Global & Remote-Friendly**: Offices in 4 countries (US, India, Singapore, UAE) and remote roles posted; a distributed team with cultural diversity.
- **Learning & Impact**: Mentorship programs, opportunities to lead innovative projects in AI and security, and the ability to work on cutting-edge infrastructure.
- **Notable Perks**: Focus on career development, knowledge sharing, and a "people-first" approach.

## Sources
1. [gruve.ai – Company homepage](https://gruve.ai/)
2. [gruve.ai – About Us](https://gruve.ai/about-us/)
3. [gruve.ai – Life at Gruve](https://gruve.ai/life-at-gruve/)
4. [linkedin.com/company/gruveai – LinkedIn Company Page](https://www.linkedin.com/company/gruveai)
5. [job-boards.greenhouse.io/gruve – Careers Page](https://job-boards.greenhouse.io/gruve)

## Other roles at Gruve

- [Senior Security Consultant (Cisco ISE/Ansible/AWS)](https://feeny.ai/job/senior-security-consultant-cisco-ise-ansible-aws-gruve-pune-nzpy01b3jxhf) — Pune, India
- [Director Cisco Security Data Center and AI Services Sales](https://feeny.ai/job/director-cisco-security-data-center-and-ai-services-sales-gruve-united-states-w9x1cfe6j1jc) — United States
- [Technical Account Manager](https://feeny.ai/job/technical-account-manager-gruve-mumbai-s7hqtbj9yy5h) — Mumbai, India
- [Network & Security Engineer](https://feeny.ai/job/network-security-engineer-gruve-dubai-xyfzv4rzh1yf) — Dubai, United Arab Emirates
- [Network & Systems Engineer (Vulnerability Management)](https://feeny.ai/job/network-systems-engineer-vulnerability-management-gruve-dubai-4c97f1fw5n7d) — Dubai, United Arab Emirates
- [Network & Systems Engineer (Vulnerability Management)](https://feeny.ai/job/network-systems-engineer-vulnerability-management-gruve-dubai-7p605zapm8fj) — Dubai, United Arab Emirates
- [Network Consultant I](https://feeny.ai/job/network-consultant-i-gruve-pune-znz1kevp3qqc) — Pune, India
- [Security Operations Consultant](https://feeny.ai/job/security-operations-consultant-gruve-pune-08z3vj5pvdre) — Pune, India
- [Network Consultant II](https://feeny.ai/job/network-consultant-ii-gruve-pune-0qzpajanq6re) — Pune, India
- [Security Analyst I](https://feeny.ai/job/security-analyst-i-gruve-pune-wa358fcfeyyy) — Pune, India