Senior Cloud & Infrastructure Security Engineer

Nortal; Kraków; On-site; PLN 180,000 - 320,000; Full time

Job summary

Nortal in Kraków is seeking a Senior Cloud and Infrastructure Security Engineer to map the operational attack surface across cloud, edge, network, and VM estates and to prioritise remediation with the security team.

You’ll work on Azure/AWS security, Terraform/OpenTofu, Kubernetes hardening, and infra-as-code reviews, shaping baseline hardening and next steps for engineers across platforms and environments.

Qualifications

• Around 6 years of cloud or infrastructure engineering experience with a strong security track record.
• Deep Azure security expertise and working knowledge of AWS.
• Kubernetes security and infrastructure-as-code practices such as Terraform or OpenTofu.

Responsibilities

• Maps Azure (AKS with Istio, APIM, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, Key Vault) and the AWS estate behind one product line.
• Reviews the edge across Cloudflare, Front Door, and Application Gateway, including WAF rules, TLS, and security headers.
• Assesses the VM estate, including SQL Server databases and legacy VMs without infrastructure-as-code.
• Reviews infrastructure-as-code and configuration management using Terraform and OpenTofu, Ansible, and Chef.
• Defines the hardening baselines and prioritizes the work for the cloud and infrastructure engineers in phase 2.

Skills

Azure security

Kubernetes security

Cloud security

Security in cloud infra

Tools

Terraform

OpenTofu

Ansible

Chef

Job description

Nortal in Kraków is seeking a Senior Cloud and Infrastructure Security Engineer to map the operational attack surface across cloud, edge, network, and VM estates and to prioritise remediation with the security team.

You’ll work on Azure/AWS security, Terraform/OpenTofu, Kubernetes hardening, and infra-as-code reviews, shaping baseline hardening and next steps for engineers across platforms and environments.