Cloud Security Engineer: IAM & Zero Trust (Azure & AWS)

PARETO SECURITIES AS; Warszawa; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Mental health support

Free lunch at the office

Referral bonus up to PLN 10,000

Benefit platform PLN 600/month

Passion clubs and social events

Job summary

BEC, a financial technology company, is building a Cloud Center of Excellence in Warsaw to secure a modern multi-cloud platform used across Danish banks. The Cloud Security Engineer will design and operate IAM, Zero Trust, and governance across Azure and AWS, driving secure onboarding and access controls.

Travel to Denmark 2-4 times per year and collaboration with cross-functional teams are expected. The role demands hands-on experience with Entra ID, IAM, and IaC tooling, plus strong English

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• Hands-on experience with Microsoft Entra ID (Azure AD), Conditional Access, MFA, RBAC, and PIM.
• Experience with AWS IAM, IAM Identity Center, cross‑account access, and cloud security best practices.

Responsibilities

• Design, implement, and operate IAM across Azure and AWS environments.
• Manage Entra ID, Conditional Access, MFA, PIM, and Identity Governance.
• Collaborate to implement secure cloud onboarding and access models.
• Automate identity lifecycle management and governance processes using IaC and scripting.

Skills

IAM

Azure

AWS

Zero Trust

Identity Governance

RBAC

MFA

PIM

IaC

Terraform

PowerShell

Python

Education

Bachelor's degree in CS/InfoSec/Engineering

Tools

Terraform

Bicep

PowerShell

Python

GitHub Actions

Job description

BEC, a financial technology company, is building a Cloud Center of Excellence in Warsaw to secure a modern multi-cloud platform used across Danish banks. The Cloud Security Engineer will design and operate IAM, Zero Trust, and governance across Azure and AWS, driving secure onboarding and access controls.

Travel to Denmark 2-4 times per year and collaboration with cross-functional teams are expected. The role demands hands-on experience with Entra ID, IAM, and IaC tooling, plus strong English