Azure Cloud Security Engineer

Apeirum GmbH; Bellprat; Hybrid; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Barcelona tech hub

Flexible hours

Permanent contract

Club Natació de Barcelona

Cobee program

Job summary

Apeirum GmbH seeks an Azure Cloud Security Engineer for our client maxon, a global provider of precision drive systems. The role is based in Barcelona with 3 days in the office and 2 days at home, permanent contract, with occasional travel to Switzerland (5–10%).

You will build and maintain the Azure security landing zone, manage Entra ID and Conditional Access, and support secure cloud onboarding across business applications.

Qualifications

• Degree in cloud security engineering or related field with 2–3 years' experience.
• Experience securing Azure environments and Entra ID.
• Proficient in Defender for Cloud and policy enforcement.
• Kubernetes security exposure is a plus.
• Strong communication with IT and business teams.

Responsibilities

• Configure and maintain the Azure security landing zone.
• Manage Entra ID, Conditional Access, and PIM.
• Support secure onboarding of cloud-based apps.
• Monitor security findings and remediate with owners.
• Collaborate with the security team and external suppliers.
• Provide deputy support for Kubernetes-related security.

Skills

Azure Conditional Access

Entra ID

Defender for Cloud

App Registration

Azure Policy

Kubernetes security

English

German (nice to have)

Security team collaboration

Task prioritization

Education

Degree in cloud security engineering or related field

Job description

We are having a huge opportunity to work with our client maxon. maxon is a global provider of world-class precision drive systems. Our drives are perfectly suited for wherever extreme precision and the highest quality standards are necessary - on Earth, and on Mars.

For creative minds and passionate doers, we offer a global yet trusted environment. Those who are prepared to question endless possibilities and challenge themselves will rise to great heights with us.

As their new Azure Cloud Security Engineer you will build and maintain their Azure cloud security — Entra ID, Conditional Access, Defender for Cloud and the Azure security landing zone. You'll work in a small security team and help the business adopt the cloud securely. Barcelona-based (3 days office work, 2 days home office), permanent, with occasional travel to Switzerland (5–10%).

Tasks

• Configure, maintain and develop the Azure security landing zone and security stack.
• Manage Entra ID, Conditional Access and PIM.
• Support application owners in secure cloud onboarding, architecture and development.
• Monitor and resolve cloud security findings with business owners.
• Close gaps and process mismatches against cloud security governance.
• Provide deputy support to the cloud-security team (incl. Kubernetes-related security).

Requirements

• Azure Conditional Access and Entra ID security (and PIM).
• Microsoft Defender for Cloud configuration and assessment.
• Enterprise Application / App Registration configuration and review.
• Azure Policy settings and landing-zone experience.
• 2nd/3rd-level Azure skills to help business applications adopt the cloud.
• Kubernetes skills (deputy function for the cloud-security team).
• Good communication within IT and with business colleagues.
• Able to prioritise tasks, especially in a security context.
• Comfortable collaborating in a security team of 4 and with external suppliers.
• Degree in cloud security engineering or a related field, plus 2–3 years' experience.
• Good English (German a plus).
• Based in Spain (Barcelona).
• Nice to have: AZ-500, CCSP or a similar certification; general security knowledge.

Benefits

• Own the cloud-security landing zone in a modern Azure environment.
• A small, collaborative security team.
• A collaborative and international environment, working with teams in Switzerland and worldwide.
• A dynamic workplace in our Barcelona tech hub, combining startup energy with Swiss stability.
• Learning and development opportunities through the maxon academy.
• A permanent contract, competitive compensation, and flexible working hours.
• Additional benefits such as Club Natació de Barcelona membership and Cobee program.