Cloud Security & IaC Intern - Terraform, Azure & OCI

Genesis Oil and Gas Consultants; Nanterre; Sur place; EUR 8 900 - 13 000; Plein temps

Description du poste

Internship - Securing and standardizing cloud environments and infrastructure pipelines (F/M)

Job Description

About us:

Technip Energies is a global technology and engineering powerhouse. With leadership positions in LNG, hydrogen, ethylene, sustainable chemistry, and CO2 management, we are contributing to the development of critical markets such as energy, energy derivatives, decarbonization, and circularity. Our complementary business segments, Technology, Products and Services (TPS) and Project Delivery, turn innovation into scalable and industrial reality.

Through collaboration and excellence in execution, our 18,000+ employees across 35 countries are fully committed to bridging prosperity with sustainability for a world designed to last.

About the mission we offer you:

1. Cloud Security Posture Assessment

• Analysis of existing Azure and OCI configurations (identities, network, storage, compute)
• Security posture analysis using CSPM tools (Wiz)
• Mapping of controls against a recognized framework (CIS Benchmark)
• Identification and prioritization of security gaps
• Implementation of a cloud risk tracking dashboard

2. Remediation Preparation and Proposals

• Definition of technical remediations in collaboration with Cloud and Product teams
• Translation of remediations into Infrastructure as Code where applicable
• Contribution to the improvement of existing Terraform modules
• Formalization of secure-by-default recommendations
• Audit of existing CI/CD pipelines (Terraform, IaC)
• Analysis of secrets management and access controls
• Addition of security controls and scans (IaC, configuration, policies)
• Proposal of secure and reusable pipeline templates
• Contribution to remediations on pipelines and Terraform modules

4. Cloud Identity and Access Management

• Mapping of existing roles and permissions
• Proposal of standardized RBAC roles
• Automation of assignments via IaC
• Recommendations for a least-privilege access model

5. Standardization and Documentation

• Structuring of a cloud and security knowledge base
• Writing of practical guides: secure by default, cloud do's & don'ts
• Alignment with existing internal practices
• Support to project teams through documentation and reusable standards

Technical Environment

• Azure and OCI
• Wiz
• Terraform
• PowerShell, scripting

Desired duration: 6 months