Cloud Security and Infrastructure Tech Lead

YOUR ITEAMS sp. z o.o.; Województwo mazowieckie; On-site; PLN 156,000 - 257,000; Part time

Benefits offered by this job

Part-time 50%

Azure project lead

Collaborative environment

Job summary

YOUR ITEAMS sp. z o.o. poszukuje doświadczonego Cloud Security i Infrastruktury Tech Leada do pracy w niepełnym wymiarze czasu (50%).

Rola obejmuje projektowanie i utrzymanie bezpiecznej architektury Azure, zarządzanie Defender for Cloud i Microsoft Sentinel, a także nadzór procesu remediation vulnerabilności w środowiskach Azure. Wymagane są praktyczne umiejętności w IAM, WAF, konteneryzacji (AKS, Kubernetes, Docker, Helm) oraz znajomość OWASP Top 10.

Qualifications

• Praktyczne doświadczenie w bezpieczeństwie chmury Azure i architekturze infra.
• Zarządzanie programami remediation i koordynacja zespołów.
• Dobry poziom w tuningu Azure WAF i ocenie ryzyka wykluczeń reguł.
• Znajomość tożsamości i dostępu (Azure RBAC, Entra ID, PIM, MFA).
• Doświadczenie z AKS/Kubernetes/Docker/Helm i praktykami operacyjnymi.
• Znajomość architektur aplikacji: .NET, React, REST, mikrousługi.

Responsibilities

• Zarządzanie end-to-end procesem zarządzania lukami w środowiach Azure.
• Koordynacja działań remediation dla Defender for Cloud i pentestów.
• Zarządzanie programami remediation wynikającymi z testów penetracyjnych.
• Administrowanie Defender for Cloud: polityki, alerty, rekomendacje i wykluczenia.
• Projektowanie monitoringu bezpieczeństwa i integracji Defender z ServiceNow i SOC.
• Rozwijanie wykrywania zagrożeń i monitoringu w Microsoft Sentinel w SOC.
• Zarządzanie i optymalizacja Azure Web Application Firewall (WAF).
• Ocena ryzyka wyłączeń reguł WAF i rekomendacje dla interesariuszy.
• Przeprowadzanie przeglądów bezpieczeństwa i ocen ryzyka dla projektów.
• Wspieranie zespołów chmury i aplikacji w rozwiązywaniu problemów bezpieczeństwa.
• Przygotowywanie raportów bezpieczeństwa i prezentacji ryzyka dla interesariuszy.
• Poprowadzenie projektowania architektury i bezpiecznej implementacji infrastruktury Azure.
• Poprawa operacyjności usług i zapewnienie zgodności z kontraktami.

Skills

Azure security

Defender for Cloud

Microsoft Sentinel

Vulnerability mgmt

WAF tuning

IAM concepts

Containerization

App architecture

Observability & CI/CD

OWASP Top 10

Secrets management

Azure RBAC / Entra ID

Tools

AKS

Kubernetes

Docker

Helm

Job description

Nasze wymagania:

• Proven experience in Azure cloud security and infrastructure architecture, including hands-on administration of Microsoft Defender for Cloud and Microsoft Sentinel.
• Experience managing vulnerability remediation programmes and coordinating with multiple teams and stakeholders.
• Proficiency with Azure Web Application Firewall (WAF) tuning and risk assessment of rule exemptions.
• Strong knowledge of identity and access management concepts including Azure RBAC, Entra ID (Azure AD), PIM, MFA and related integration patterns.
• Familiarity with containerisation and orchestration technologies (AKS, Kubernetes, Docker, Helm) and associated operational practices.
• Understanding of modern application architectures: .NET backend, React frontend, REST APIs, microservices and event-driven patterns.
• Experience with observability and CI/CD tools such as Dynatrace and Azure DevOps or equivalent.
• Working knowledge of OWASP Top 10 and vulnerability management best practices; experience with secrets management (Azure Key Vault) is desirable.
• Proven ability to present technical findings and risk-based recommendations to stakeholders and governance forums.

O projekcie:

We are seeking an experienced Cloud Security and Infrastructure Tech Lead (part time job) to join the project team. The person in this role will provide technical leadership and hands-on expertise in Azure cloud infrastructure architecture, security, and operational management.

Zakres obowiązków:

• Manage the end-to-end vulnerability management process across Azure cloud environments.
• Coordinate remediation activities for vulnerabilities identified by Microsoft Defender for Cloud, MEND, and penetration testing exercises.
• Oversee remediation programmes arising from penetration test findings for platform releases.
• Administer and optimise Microsoft Defender for Cloud, including security policies, alert management, recommendations, and exclusion governance.
• Design and improve security monitoring processes and integrations between Microsoft Defender for Cloud, ServiceNow, and the SOC.
• Develop and enhance threat detection and monitoring capabilities within Microsoft Sentinel in collaboration with the SOC.
• Manage and tune Azure Web Application Firewall (WAF): analyse blocked requests, optimise rules, and implement business‑required rule exclusions.
• Assess the security impact of WAF exemptions and provide risk‑based recommendations to stakeholders.
• Conduct security reviews and risk assessments for new projects, infrastructure changes, and application releases.
• Support cloud and application teams in resolving security‑related issues and implementing security controls.
• Prepare security reports, risk presentations, and technical recommendations for project stakeholders and client governance forums.
• Lead the architectural design and secure implementation of Azure cloud infrastructure with emphasis on operational excellence, troubleshooting, and cost management.
• Drive service operations and delivery assurance processes to align with contractual and stakeholder expectations.
• Provide technical vision and leadership to motivate the team to deliver incremental improvements aligned with client contracts and relationship goals.
• Foster a proactive, collaborative approach in managing relationships with clients and internal stakeholders.

Oferujemy:

• Part-time (50%) role allowing for flexible working arrangements consistent with project needs.
• Opportunity to lead security and infrastructure efforts on a high‑impact Azure‑based programme.
• Collaborative, outcomes‑focused project environment.