Policy-as-Code Cloud Security Engineer

XpertDirect; København; Hybrid; DKK 900,000 - 1,100,000; Full time

Job summary

XpertDirect in Copenhagen, Denmark is seeking a Cloud Security Policy Engineer to build policy-as-code systems enforcing security and standards across AWS and Kubernetes. You will collaborate at the intersection of Cloud Security, Platform Engineering, and DevSecOps to translate security needs into scalable guardrails that prevent insecure configurations from reaching production.

Design and implement policy controls, enforce Terraform workflows, and develop security tooling in Python.

Qualifications

• 4+ years in Cloud Security, Platform Security, DevSecOps or similar roles.
• Experience with OPA and Rego for policy enforcement.
• Proficient in Terraform and Kubernetes.
• Strong knowledge of AWS, IAM, and cloud security best practices.
• Experience with Python for tooling and automation.

Responsibilities

• Design and implement policy-as-code controls using OPA and Rego.
• Build preventative security guardrails across Kubernetes and AWS.
• Enforce infrastructure standards during Terraform workflows.
• Develop security policies covering IAM, networking, workloads, and cloud configuration.
• Integrate automated policy checks into CI/CD pipelines.
• Build tooling and automation in Python to support security guardrails.

Skills

Cloud Security

DevSecOps

Policy-as-Code

Python

Kubernetes

AWS

IAM

Tools

OPA

Rego

Terraform

Kubernetes

Job description

XpertDirect in Copenhagen, Denmark is seeking a Cloud Security Policy Engineer to build policy-as-code systems enforcing security and standards across AWS and Kubernetes. You will collaborate at the intersection of Cloud Security, Platform Engineering, and DevSecOps to translate security needs into scalable guardrails that prevent insecure configurations from reaching production.

Design and implement policy controls, enforce Terraform workflows, and develop security tooling in Python.