Information and Communications Technology (ICT) Officer (Cloud SecOps Engineer) (P)

IOM; Valencia; On-site; EUR 60,000 - 90,000; Full time

Job summary

IOM is seeking an ICT Officer (Cloud SecOps Engineer) to lead and evolve its cloud security architecture and operations. The role focuses on Azure security, threat detection, incident response, and security automation to support IOM’s global offices.

Ideal candidates have 5+ years in Cloud SecOps, strong Azure experience, and relevant certifications. The position collaborates across development, operations, and information security teams under CTO oversight.

Qualifications

• 5+ years in Cloud SecOps engineering.
• Strong hands-on with Azure services (Sentinel, Defender for Cloud, Key Vault, Firewall).
• Experience automating cloud security and compliance.
• Proficient in IaC, CI/CD, scripting and threat hunting.

Responsibilities

• Implement 24/7 security monitoring with Sentinel/Defender for Cloud.
• Define incident detection and response workflows.
• Enforce Zero Trust via Azure AD Conditional Access, PIM, RBAC.
• Audit privileged access and ensure GDPR/ISO 27001 compliance.
• Run vulnerability scans and automate compliance checks with Azure Policy.
• Embed security into CI/CD pipelines and scan IaC templates.
• Threat hunting using KQL; automate responses with Logic Apps/Functions.
• Collaborate across teams and optimize cloud spend.

Skills

Cloud security controls

NIST CSF

MITRE ATT&CK

ITIL/ITSM

Python

PowerShell

CI/CD

DevOps

Containerization

Kubernetes

Azure

AWS

IaC (Terraform/CloudFormation/Ansible)

Jenkins

GitHub Actions

GitLab CI/CD

Azure AD

VPN/VPC encryption

Education

Master’s degree in Cybersecurity, Computer Engineering, or Computer Science

University degree with 7+ years relevant experience

Microsoft Certified: Azure Security Engineer Associate

Microsoft Certified: Azure Fundamentals

ITIL v4 Foundation

Certified Cloud Security Professional (CSSP)

CISSP

AWS Certified Security Specialty

Tools

Terraform

CloudFormation

Ansible

Jenkins

GitHub Actions

GitLab CI/CD

Docker

Kubernetes

Azure DevOps

Azure Sentinel

Defender for Cloud

Azure Policy

PowerShell

Job description

Organizational context

Established in 1951, IOM is a UN-related organization and the leading UN agency for migration. It promotes humane and orderly migration, saves lives, protects people on the move, and drives solutions to displacement. The ICT Officer (Cloud SecOps Engineer) will lead and evolve IOM's cloud security architecture and operations, ensuring the security, integrity, and compliance of its cloud infrastructure, primarily Azure, for global offices.

Job purpose

The ICT Officer (Cloud SecOps Engineer) is responsible for leading and evolving IOM's cloud security architecture and operations. This role ensures the security, integrity, and compliance of IOM’s cloud infrastructure, with a primary focus on Azure and an awareness of multi-cloud environments. Key responsibilities include threat detection, incident response, security automation, and hardening of cloud environments to support IOM's global operations. The position involves close collaboration with development, operations, and information security teams to identify and analyze vulnerabilities, support the mitigation of these vulnerabilities, enforce compliance, and foster a security-aware culture within the organization. The role operates under the supervision of the Chief Technology Officer and the Senior ICT Officer (Cloud Services).

Responsibilities

Key responsibilities include implementing and managing 24/7 security monitoring using tools like Microsoft Sentinel and Defender for Cloud, and defining incident detection and management workflows. The role involves enforcing Zero Trust principles through Azure AD Conditional Access, PIM, and RBAC, and auditing privileged access. Ensuring compliance with regulations like GDPR and ISO 27001, conducting vulnerability scans, and automating compliance checks using Azure Policy are crucial. The position requires embedding security into CI/CD pipelines, scanning Infrastructure-as-Code templates for misconfigurations, and proactively hunting for threats using KQL queries. Automation of responses via Azure Logic Apps and Functions is also a key duty. Collaboration with other teams, training on best practices, and providing technical expertise are essential, alongside optimizing cloud spending.

Education

A Master’s degree in Cybersecurity, Computer Engineering, Computer Science, or a related field with five years of relevant experience, or a University degree with seven years of relevant experience. Required certifications include Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Fundamentals, ITIL v4 Foundation (within 6 months), and Certified Cloud Security Professional (CSSP). CISSP and AWS Certified Security Specialist are advantageous.

Work experience

Requires a minimum of 5 years in Cloud SecOps engineering, with strong hands‑on experience in Azure services (Sentinel, Defender for Cloud, Key Vault, Firewall). Proven experience in managing cloud infrastructure in AWS and Azure through automation is necessary. Expertise in Infrastructure-as-Code tools (Terraform, CloudFormation, Ansible), CI/CD tools (Jenkins, GitHub Actions, Azure DevOps), and scripting languages (Python, Bash, PowerShell) is essential. Knowledge of containerization (Docker) and orchestration (Kubernetes) is required, along with familiarity with monitoring tools and solid understanding of security best practices.

Skills

Demonstrated experience in cloud security controls (Azure primary, AWS secondary). Strong understanding of NIST CSF, MITRE ATT&CK, ITIL/ITSM frameworks. Knowledge of cloud security fundamentals, programming languages (Python, C++, JAVA), DevOps, containerization, networking protocols, and cloud platforms (AWS, Azure). Proficiency in IaC tools (Terraform, CloudFormation, Ansible) and CI/CD tools (Jenkins, GitLab CI/CD, GitHub Actions). Expertise in Azure AD, VPN, VPC, encryption, DNS, Load Balancers, Kubernetes, scripting (PowerShell, Python, KQL), and Azure Policy. Project management and ability to handle confidential data are also key.

Required languages

English

Desired languages

Arabic, French, Russian, Spanish