Azure Cloud Security Engineer

ADD & CO; Barcelona; Híbrido; Confidencial; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid setup – Barcelona-based

Small team of 4

International collaboration withSwitz

Professional development & internal学院

Permanent contract with flexible hours

Descripción de la vacante

ADD & CO in Barcelona is seeking an Azure Cloud Security Engineer to join a small, collaborative security team.

You will build and maintain the Azure security infrastructure—Entra ID, Conditional Access, Defender for Cloud and the security landing zone—and help the business adopt the cloud securely, with hybrid work and occasional travel to Switzerland.

Formación

• Azure Conditional Access and Entra ID security including PIM.
• Microsoft Defender for Cloud configuration and assessment.
• Enterprise Application and App Registration configuration and review.
• Azure Policy settings and landing zone experience.
• 2nd/3rd level Azure skills to support business application cloud adoption.
• Kubernetes skills at deputy level.
• Degree in cloud security engineering or related field plus 2-3 years experience.
• Good communication skills in English – German is a plus.
• Based in Barcelona.

Responsabilidades

• Configure, maintain and develop the Azure security landing zone and security stack.
• Manage Entra ID, Conditional Access and PIM.
• Support application owners in secure cloud onboarding, architecture and development.
• Monitor and resolve cloud security findings with business owners.
• Close gaps and process mismatches against cloud security governance.
• Provide deputy support to the cloud security team including Kubernetes-related security.

Conocimientos

Azure CA & Entra ID

Defender for Cloud

App Registration

Azure Policy & Landing Zone

Advanced Azure skills

Kubernetes security

English communication

Based in Barcelona

Educación

Degree in cloud security engineering or related field

Descripción del empleo

Barcelona, Spain | Hybrid (3 days in office) | Permanent | Full-time | Occasional travel to Switzerland (5-10%)

About the role

We are looking for an Azure Cloud Security Engineer to join a small, collaborative security team at an established company in Barcelona. You will build and maintain the Azure cloud security infrastructure – Entra ID, Conditional Access, Defender for Cloud and the Azure security landing zone – and help the business adopt the cloud securely.

This is a hands‑on role with real ownership in a modern Azure environment, working within a team of 4 and collaborating with international teams in Switzerland.

Tasks

What you will do

• Configure, maintain and develop the Azure security landing zone and security stack
• Manage Entra ID, Conditional Access and PIM
• Support application owners in secure cloud onboarding, architecture and development
• Monitor and resolve cloud security findings with business owners
• Close gaps and process mismatches against cloud security governance
• Provide deputy support to the cloud security team including Kubernetes-related security

Requirements

What we are looking for

• Azure Conditional Access and Entra ID security including PIM
• Microsoft Defender for Cloud configuration and assessment
• Enterprise Application and App Registration configuration and review
• Azure Policy settings and landing zone experience
• 2nd/3rd level Azure skills to support business application cloud adoption
• Kubernetes skills at deputy level
• Degree in cloud security engineering or related field plus 2-3 years experience
• Good communication skills in English – German is a plus
• Based in Barcelona

Nice to have

• AZ-500, CCSP or similar certification
• General security knowledge beyond Azure

Benefits

What is on offer

• Permanent contract with competitive salary and flexible working hours
• Hybrid setup – Barcelona based
• Own the cloud security landing zone in a modern Azure environment
• Small collaborative security team of 4
• International collaboration with teams in Switzerland
• Startup energy within an established Swiss industrial company
• Professional development and internal academy access