Principal Cloud Security Engineer

develop; München; On-site; EUR 120,000 - 145,000; Full time

Job summary

AI Scale Up in Munich is seeking a Cloud Security Engineer to secure a complex cloud environment and drive security across AWS, Kubernetes and IaC.

You will design IAM RBAC and least-privilege controls, strengthen cloud security posture with CSPM tooling, and work closely with engineering teams to implement automated security and compliance processes using Terraform, CloudFormation or AWS CDK.

Qualifications

• 5+ years’ experience in Cloud Security, Infrastructure Security, DevSecOps or similar.
• Strong hands-on AWS and Kubernetes security experience.
• Experience with Terraform, CloudFormation or AWS CDK.
• Strong knowledge of IAM, container security and CSPM; Wiz experience highly desirable.

Responsibilities

• Secure and harden AWS and multi-cloud infrastructure, including Kubernetes environments.
• Design and enforce IAM, RBAC and least-privilege security controls.
• Manage cloud security posture using Wiz and drive remediation.
• Automate security, compliance and infrastructure processes using IaC and scripting.

Skills

Cloud Security

DevSecOps

AWS

Kubernetes

Tools

Terraform

CloudFormation

AWS CDK

IAM

Wiz

Job description

Cloud Security Engineer | Munich | €120k - €145k | AI Scale Up

A rapidly growing technology company operating at the intersection of AI, software and autonomous systems is expanding its Munich engineering team and looking for an experienced Cloud Security Engineer.

You’ll help secure a complex cloud environment, working closely with engineering teams across AWS, Kubernetes, IAM, container security and Infrastructure-as-Code.

What you’ll be doing

• Secure and harden AWS and multi-cloud infrastructure, including Kubernetes environments
• Design and enforce IAM, RBAC and least-privilege security controls
• Manage cloud security posture using tools such as Wiz and drive remediation
• Automate security, compliance and infrastructure processes using IaC and scripting

What we’re looking for

• 5+ years’ experience in Cloud Security, Infrastructure Security, DevSecOps or similar
• Strong hands-on AWS and Kubernetes security experience
• Experience with Terraform, CloudFormation or AWS CDK
• Strong knowledge of IAM, container security and CSPM; Wiz experience highly desirable

Nice to have

• Experience across Azure, GCP or OCI
• Python, Go or C++ development/scripting experience
• AWS Security Specialty, CKS or CKA certification
• Experience securing highly constrained or air-gapped environments