Senior Cloud Security Engineer

Nortal; Kraków; On-site; PLN 180,000 - 320,000; Full time

Job summary

Nortal in Kraków is seeking a Senior Cloud and Infrastructure Security Engineer to map the operational attack surface across cloud, edge, network, and VM estates and to prioritise remediation with the security team.

You’ll work on Azure/AWS security, Terraform/OpenTofu, Kubernetes hardening, and infra-as-code reviews, shaping baseline hardening and next steps for engineers across platforms and environments.

Qualifications

• Around 6 years of cloud or infrastructure engineering experience with a strong security track record.
• Deep Azure security expertise and working knowledge of AWS.
• Kubernetes security and infrastructure-as-code practices such as Terraform or OpenTofu.

Responsibilities

• Maps Azure (AKS with Istio, APIM, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, Key Vault) and the AWS estate behind one product line.
• Reviews the edge across Cloudflare, Front Door, and Application Gateway, including WAF rules, TLS, and security headers.
• Assesses the VM estate, including SQL Server databases and legacy VMs without infrastructure-as-code.
• Reviews infrastructure-as-code and configuration management using Terraform and OpenTofu, Ansible, and Chef.
• Defines the hardening baselines and prioritizes the work for the cloud and infrastructure engineers in phase 2.

Skills

Azure security

Kubernetes security

Cloud security

Security in cloud infra

Tools

Terraform

OpenTofu

Ansible

Chef

Job description

Overview

We are looking for an Senior Cloud and Infrastructure Security Engineer.

The role maps the operational attack surface while the other seniors assess the applications. It provides a clear view of the cloud, edge, network, and VM estate, with identified gaps ranked for remediation.

About Nortal

We’reNortal. We think big and createcutting-edgedigital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwideimpactedby our work, we believewe’vegot the numbers to back up that statement.

Our global teams have played a significant role in many Fortune 500 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.

Responsibilities

• Maps Azure (AKS with Istio, APIM, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, Key Vault) and the AWS estate behind one product line (ECS, EC2, Lambda, API Gateway, VPC)
• Reviews the edge across Cloudflare, Front Door, and Application Gateway, including WAF rules, TLS, and security headers
• Assesses the VM estate, including more than 500 SQL Server agency databases and a legacy product running on static VMs without infrastructure-as-code
• Reviews infrastructure-as-code and configuration management using Terraform and OpenTofu, Ansible, and Chef
• Defines the hardening baselines and prioritizes the work for the cloud and infrastructure engineers in phase 2

Qualifications

• Around 6 years of cloud or infrastructure engineering experience, with a strong security track record
• Deep Azure security expertise and working knowledge of AWS
• Kubernetes security
• Terraform or OpenTofu
• Hands-on experience using AI assistants to review infrastructure code and configuration

Helpful:

• Service mesh (Istio) security
• Ability to read Ansible and Chef
• AZ-500, AWS Security Specialty, or CCSP
• Cloud security posture tooling, such as Defender for Cloud, Wiz, or similar
• Experience bringing an estate with no infrastructure-as-code under control