Hybrid Cloud & Data Security Engineer (Dublin)

Amach; Ireland; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Fast-growing company

Career advancement

Learning opportunities

Flexible working

Competitive salary

Job summary

Amach is seeking a security-focused professional to join on a hybrid basis in Dublin, attending the office at least once per week. The role centers on cloud and data security, implementing governance, reporting, and secure-by-design practices across infrastructure and AI adoption.

You will engineer and manage security controls, collaborate with Data, Privacy, Legal and IT stakeholders, and help mature CSPM/DSPM programs while enabling secure data flows.

Qualifications

• Experience in cloud security, security engineering, or infrastructure security roles.
• Hands‑on experience securing cloud environments (AWS, Azure, or GCP) - IAM, network security, encryption, workload protection.
• Hands‑on experience implementing data protection controls in Microsoft Purview or equivalent platforms.
• Experience delivering control governance, remediation workflows and evidence‑based reporting for cloud and data security non‑compliances.
• Experience collaborating with governance stakeholders (Data, Privacy, Legal, IT) on policy and control implementation.
• Strong understanding of data protection concepts (classification, least privilege, encryption, DLP, secure sharing) and how they apply in modern cloud and collaboration environments.
• Ability to translate risk into practical standards and secure‑by‑design blueprints for cloud and data use cases.
• Strong analytical skills to interpret signals and drive risk‑based remediation priorities.
• Strong stakeholder management and communication skills, including the ability to explain control requirements to technical and non‑technical audiences.
• An interest in AI security considerations (e.g., data exposure risks in AI tooling, secure adoption patterns) - training and support will be provided to build this out further

Responsibilities

• Own cloud and data security policies, standards and secure‑by‑design patterns for infrastructure, information protection and safe AI adoption.
• Engineer, manage and govern cloud security and data protection controls (currently using Microsoft Purview)
• Operate and improve Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM) practices, using insights to prioritise remediation
• Define governance processes for cloud and data security non‑compliances, exceptions and control gaps, coordinating remediation with technology and data owners
• Partner with Data, Privacy, Legal and IT stakeholders to ensure controls and processes meet regulatory and internal requirements
• Support incident response by providing SME input for cloud misconfigurations, data leakage events, or insider risk, and driving control improvements
• Provide security architecture reviews and guidance for cloud, data platform and analytics initiatives to ensure secure data flows and protection by design
• Contribute to security awareness and enablement for employees on safe handling of sensitive data and cloud resources
• Work with Cyber Defence to ensure relevant cloud and data protection events and telemetry are available for monitoring and response
• Support development of metrics and reporting on cloud and data security posture to track trends in maturity and controls effectiveness

Skills

Cloud security

Security engineering

Infrastructure security

IAM

Network security

Encryption

Workload protection

Data protection

DLP

Secure sharing

Risk translation

Stakeholder management

Tools

Microsoft Purview

Job description

Amach is seeking a security-focused professional to join on a hybrid basis in Dublin, attending the office at least once per week. The role centers on cloud and data security, implementing governance, reporting, and secure-by-design practices across infrastructure and AI adoption.

You will engineer and manage security controls, collaborate with Data, Privacy, Legal and IT stakeholders, and help mature CSPM/DSPM programs while enabling secure data flows.