Cloud security engineer - IAM (Azure & AWS)

PARETO SECURITIES AS; Warszawa; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Mental health support

Free lunch at the office

Referral bonus up to PLN 10,000

Benefit platform PLN 600/month

Passion clubs and social events

Job summary

BEC, a financial technology company, is building a Cloud Center of Excellence in Warsaw to secure a modern multi-cloud platform used across Danish banks. The Cloud Security Engineer will design and operate IAM, Zero Trust, and governance across Azure and AWS, driving secure onboarding and access controls.

Travel to Denmark 2-4 times per year and collaboration with cross-functional teams are expected. The role demands hands-on experience with Entra ID, IAM, and IaC tooling, plus strong English

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• Hands-on experience with Microsoft Entra ID (Azure AD), Conditional Access, MFA, RBAC, and PIM.
• Experience with AWS IAM, IAM Identity Center, cross‑account access, and cloud security best practices.

Responsibilities

• Design, implement, and operate IAM across Azure and AWS environments.
• Manage Entra ID, Conditional Access, MFA, PIM, and Identity Governance.
• Collaborate to implement secure cloud onboarding and access models.
• Automate identity lifecycle management and governance processes using IaC and scripting.

Skills

IAM

Azure

AWS

Zero Trust

Identity Governance

RBAC

MFA

PIM

IaC

Terraform

PowerShell

Python

Education

Bachelor's degree in CS/InfoSec/Engineering

Tools

Terraform

Bicep

PowerShell

Python

GitHub Actions

Job description

You will join our Cloud Center of Excellence. The team is responsible for shaping and securing a modern multi-cloud platform used across critical financial services workloads.

The Cloud Security Engineer role offers an opportunity to work with Microsoft Entra ID, Azure, AWS, and cloud security technologies while driving Identity and Access Management, Zero Trust, and cloud governance initiatives across the organisation.

Primary tasks and responsibilities include:

• Design, implement, and operate Identity and Access Management solutions across Azure and AWS environments.
• Manage Microsoft Entra ID, Conditional Access, MFA, Privileged Identity Management (PIM), and Identity Governance capabilities.
• Design and maintain AWS IAM, IAM Identity Center, permission models, federated access, and least-privilege controls.
• Collaborate with Cloud Architects, Security Engineers, Platform Engineers, Compliance Specialists, and application teams to implement secure cloud onboarding and access models.
• Automate identity lifecycle management, access provisioning, and governance processes using Infrastructure as Code and scripting.
• Support audits, compliance reviews, security assessments, and operational risk initiatives related to cloud platforms.
• Travel occasionally to Denmark (typically 2-4 times per year) and participate in workshops, PI Planning events, and stakeholder meetings.

To succeed you will have:

• A curious mindset, an open nature, and a strong willingness to share knowledge with others.
• Fluent English communication skills, both written and spoken.
• A Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
• Hands-on experience with Microsoft Entra ID (Azure AD), Conditional Access, MFA, RBAC, Privileged Identity Management (PIM), and Identity Governance.
• Experience with AWS IAM, IAM Identity Center, cross-account access, role-based access control, and cloud security best practices.
• Strong understanding of Zero Trust principles, authentication, authorisation, federation, identity lifecycle management, and cloud platform operations in Azure and, preferably, AWS within regulated or enterprise-scale environments.
• Knowledge of Infrastructure as Code and automation technologies such as Terraform, Bicep, PowerShell, Python, or GitHub Actions, together with proficiency in GitHub Copilot and M365 Copilot as productivity and engineering accelerators.

It's nice-to-have:

• Microsoft Certified: Azure Administrator Associate (AZ-104) or Microsoft Certified: Identity and Access Administrator Associate (SC-300), or equivalent certification.
• AWS Certified Security - Specialty, or other AWS security-focused certifications.
• Experience with Microsoft Defender or AWS security services such as GuardDuty, Security Hub, and CloudTrail.
• Experience implementing Zero Trust transformation programmes.
• Experience working in the financial sector or other highly regulated industries.
• Knowledge of Active Directory, hybrid identity, and federation solutions.
• Experience supporting audit, compliance, or regulatory requirements such as DORA, ISO 27001, NIS2, or similar.

Be your best self with BEC's benefits!

We offer a diverse range of benefits for our employees. Here are just a few of them.

• Mental health support
• Free lunch at the office
• Referral bonus up to PLN 10,000
• PLN 600 on a benefit platform a month
• Passion clubs and social events (tennis, salsa dancing, board games, family picnics and more)

BEC is in the process of being acquired by our largest customer and co-owner, Nykredit, which is Denmark's largest mortgage provider and third-largest bank. We will become part of a new and larger organization called Nykredit Financial Technologies. In the transition phase, we are recruiting for roles that we expect to be highly needed in our future organization.

Join a community of people sharing great ambitions

BEC is a financial technology company creating IT solutions for Danish banks. Together, we enable bank customers to invest online, take out loans and transfer money. In other words, we deliver the tech it takes to run a bank.

We have 1,600+ employees spread across locations in Denmark and Poland. We collaborate in a flat hierarchy with a high degree of mutual trust. Here, great ideas have no rank, and we invite everybody to chip in to create the strongest IT solutions for our Danish banks.

We're an equal opportunities employer. We hire top talent regardless of race, religion, color, national origin, sexual orientation, gender identity, or age. Learn more about us in our culture book:W e are BEC