Cloud security engineer IAM in financial services

BEC Financial Technologies; Warszawa; On-site; PLN 230,000 - 310,000; Full time

Benefits offered by this job

Travel to Denmark

Mental health support

Free lunch

Professional development budget

Referral bonus PLN 10,000

Social events

Job summary

BEC Financial Technologies invites a Cloud Security Engineer to join our Cloud Center of Excellence. You will shape and secure a modern multi-cloud platform used across critical financial workloads, focusing on Identity and Access Management, Zero Trust, and cloud governance.

You will work with Microsoft Entra ID, Azure, AWS, and automation tools to strengthen security posture and enable scalable cloud adoption across the organisation.

Job description

Описание

You will join our Cloud Center of Excellence. The team is responsible for shaping and securing a modern multi-cloud platform used across critical financial services workloads. The Cloud Security Engineer role offers an opportunity to work with Microsoft Entra ID, Azure, AWS, and cloud security technologies while driving Identity and Access Management, Zero Trust, and cloud governance initiatives across the organisation.

Задачи

• Design, implement, and operate Identity and Access Management solutions across Azure and AWS environments.
• Manage Microsoft Entra ID, Conditional Access, MFA, Privileged Identity Management (PIM), and Identity Governance capabilities.
• Design and maintain AWS IAM, IAM Identity Center, permission models, federated access, and least-privilege controls.
• Collaborate with Cloud Architects, Security Engineers, Platform Engineers, Compliance Specialists, and application teams to implement secure cloud onboarding and access models.
• Automate identity lifecycle management, access provisioning, and governance processes using Infrastructure as Code and scripting.
• Support audits, compliance reviews, security assessments, and operational risk initiatives related to cloud platforms.

Требования

• A curious mindset, an open nature, and a strong willingness to share knowledge with others.
• Fluent English communication skills, both written and spoken.
• A Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
• Hands-on experience with Microsoft Entra ID (Azure AD), Conditional Access, MFA, RBAC, Privileged Identity Management (PIM), and Identity Governance.
• Experience with AWS IAM, IAM Identity Center, cross-account access, role-based access control, and cloud security best practices.
• Strong understanding of Zero Trust principles, authentication, authorisation, federation, identity lifecycle management, and cloud platform operations in Azure and, preferably, AWS within regulated or enterprise-scale environments.
• Knowledge of Infrastructure as Code and automation technologies such as Terraform, Bicep, PowerShell, Python, or GitHub Actions, together with proficiency in GitHub Copilot and M365 Copilot as productivity and engineering accelerators.
• Будет плюсом: Microsoft Certified: Azure Administrator Associate (AZ-104) or Microsoft Certified: Identity and Access Administrator Associate (SC-300), or equivalent certification; AWS Certified Security - Specialty, or other AWS security-focused certifications; Experience with Microsoft Defender or AWS security services such as GuardDuty, Security Hub, and CloudTrail; Experience implementing Zero Trust transformation programmes; Experience working in the financial sector or other highly regulated industries; Knowledge of Active Directory, hybrid identity, and federation solutions; Experience supporting audit, compliance, or regulatory requirements such as DORA, ISO 27001, NIS2, or similar

Условия

• Travel occasionally to Denmark (typically 2-4 times per year) and participate in workshops, PI Planning events, and stakeholder meetings.
• Mental health support
• Free lunch at the office
• Professional development budget
• Referral bonus up to PLN 10,000 PLN 600 on a benefit platform a month
• Passion clubs and social events (tennis, salsa dancing, board games, family picnics and more)