Azure Cloud Security Engineer

ADD & CO; Bellprat; Híbrido; Confidencial; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work setup

Professional development

International collaboration

Competitive salary

Descripción de la vacante

ADD & CO in Barcelona is seeking an Azure Cloud Security Engineer to join a small, collaborative security team. You will build and maintain the Azure security infrastructure – Entra ID, Conditional Access, Defender for Cloud and the landing zone – and help the business adopt cloud securely.

This hands-on role offers ownership in a modern Azure environment, with a team of 4 and coordination with international colleagues in Switzerland. Excellent English communication is required.

Formación

• Degree in cloud security engineering or related field with 2–3 years of experience.
• Strong English communication skills; German is a plus.
• Based in Barcelona.

Responsabilidades

• Configure, maintain and develop the Azure security landing zone and security stack.
• Manage Entra ID, Conditional Access and PIM.
• Support application owners in secure cloud onboarding, architecture and development.
• Monitor and resolve cloud security findings with business owners.
• Close gaps and process mismatches against cloud security governance.
• Provide deputy support to the cloud security team including Kubernetes-related security.

Conocimientos

Azure Conditional Access

Entra ID security

PIM

Defender for Cloud

Azure Policy

Landing zone

Kubernetes security

Security governance

English communication

Educación

Degree in cloud security

Herramientas

Azure AD

Defender for Cloud

Kubernetes

Descripción del empleo

Barcelona, Spain | Hybrid (3 days in office) | Permanent | Full-time | Occasional travel to Switzerland (5-10%)

About the role

We are looking for an Azure Cloud Security Engineer to join a small, collaborative security team at an established company in Barcelona. You will build and maintain the Azure cloud security infrastructure – Entra ID, Conditional Access, Defender for Cloud and the Azure security landing zone – and help the business adopt the cloud securely.

This is a hands‑on role with real ownership in a modern Azure environment, working within a team of 4 and collaborating with international teams in Switzerland.

Tasks

What you will do

• Configure, maintain and develop the Azure security landing zone and security stack
• Manage Entra ID, Conditional Access and PIM
• Support application owners in secure cloud onboarding, architecture and development
• Monitor and resolve cloud security findings with business owners
• Close gaps and process mismatches against cloud security governance
• Provide deputy support to the cloud security team including Kubernetes-related security

Requirements

What we are looking for

• Azure Conditional Access and Entra ID security including PIM
• Microsoft Defender for Cloud configuration and assessment
• Enterprise Application and App Registration configuration and review
• Azure Policy settings and landing zone experience
• 2nd/3rd level Azure skills to support business application cloud adoption
• Kubernetes skills at deputy level
• Degree in cloud security engineering or related field plus 2-3 years experience
• Good communication skills in English – German is a plus
• Based in Barcelona

Nice to have

• AZ-500, CCSP or similar certification
• General security knowledge beyond Azure

Benefits

What is on offer

• Permanent contract with competitive salary and flexible working hours
• Hybrid setup – Barcelona based
• Own the cloud security landing zone in a modern Azure environment
• Small collaborative security team of 4
• International collaboration with teams in Switzerland
• Startup energy within an established Swiss industrial company
• Professional development and internal academy access