Azure Cloud Security Engineer

apeirum; Barcelona; Presencial; Confidencial; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Small security team

Barcelona tech hub

Permanent contract

Swiss collaboration

Descripción de la vacante

Apeirum is hiring an Azure Cloud Security Engineer for a Barcelona-based role focused on building and maintaining secure Azure cloud platforms. You will work in a small security team, help the business adopt cloud securely, and travel occasionally to Switzerland (5–10%).

The ideal candidate has 2–3 years of Azure security experience, strong Entra ID and PIM skills, and good English; German is a plus. The position offers a permanent contract and a dynamic Barcelona tech hub atmosphere.

Formación

• Requires a degree in cloud security engineering or related field.
• 2–3 years of cloud security experience with Azure.
• Strong knowledge of Entra ID, PIM and Defender for Cloud.
• Good English; German a plus.

Responsabilidades

• Configure, maintain and develop the Azure security landing zone and security stack.
• Manage Entra ID, Conditional Access and PIM.
• Support application owners in secure cloud onboarding and development.
• Monitor and resolve cloud security findings with business owners.
• Close gaps against cloud security governance.
• Provide deputy support to the cloud-security team including Kubernetes security.

Conocimientos

Azure Conditional Access

Entra ID

PIM

Defender for Cloud

Azure Policy

Kubernetes security

English communication

Educación

Degree in cloud security engineering

Herramientas

Kubernetes

Descripción del empleo

Apeirum partners with European companies to place senior IT talent. For one of our client partners in Barcelona we are hiring an Azure Cloud Security Engineer to build and maintain their Azure cloud security — Entra ID, Conditional Access, Defender for Cloud and the Azure security landing zone. You'll work in a small security team and help the business adopt the cloud securely. Barcelona-based, permanent, with occasional travel to Switzerland (5–10%).

Tasks

• Configure, maintain and develop the Azure security landing zone and security stack.
• Manage Entra ID, Conditional Access and PIM.
• Support application owners in secure cloud onboarding, architecture and development.
• Monitor and resolve cloud security findings with business owners.
• Close gaps and process mismatches against cloud security governance.
• Provide deputy support to the cloud-security team (incl. Kubernetes-related security).

Requirements

• Azure Conditional Access and Entra ID security (and PIM).
• Microsoft Defender for Cloud configuration and assessment.
• Enterprise Application / App Registration configuration and review.
• Azure Policy settings and landing-zone experience.
• 2nd/3rd-level Azure skills to help business applications adopt the cloud.
• Kubernetes skills (deputy function for the cloud-security team).
• Good communication within IT and with business colleagues.
• Able to prioritise tasks, especially in a security context.
• Comfortable collaborating in a security team of 4 and with external suppliers.
• Degree in cloud security engineering or a related field, plus 2–3 years' experience.
• Good English (German a plus).
• Based in Spain (Barcelona).
• Nice to have: AZ-500, CCSP or a similar certification; general security knowledge.

Benefits

• Own the cloud-security landing zone in a modern Azure environment.
• A small, collaborative security team.
• A dynamic and friendly workplace in our Barcelona tech hub, combining startup energy with the stability of a Swiss industrial leader.
• International collaboration with global teams, especially in Switzerland, and external integration partners.
• Opportunities for continuous learning and growth through the internal academy and professional development programs.
• A permanent contract, competitive compensation, and flexible working hours supporting work–life balance.