Ai-Driven Sre (Azure) – Cloud Security & Iam | Hybrid Lisbon

Pandadoc; Viseu; Híbrido; EUR 55 000 - 75 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Training plan

Other Benefits

Resumo da oferta

Sysmatch, empresa portuguesa com quase 20 anos de atuação, procura um Site Reliability Engineer (Security & Identity) para atuar num regime híbrido em Lisboa. O objetivo é garantir disponibilidade, estabilidade e segurança dos serviços em Cloud, com ênfase em identidade e gestão de acesso.

Será referência técnica para segurança e confiabilidade, lidando com patching, AD/Entra ID, RBAC e gestão de identidades, bem como monitorização de EDR, logging e conformidade.

Qualificações

• Experiência em operações de cloud com foco em segurança e identidade.
• Conhecimentos de AD e Entra ID.
• Experiência com patch management em ambientes Windows/Linux.
• Capacidade de criar relatórios de conformidade e KPIs de segurança.

Responsabilidades

• Gerir patching de plataformas Windows e Linux e manter conformidade com políticas de segurança.
• Operar ferramentas de gestão de patches (WSUS, Red Hat Satellite) e gerar relatórios de status.
• Garantir controles de acesso (IAM), RBAC e PIM em ambientes cloud.
• Acompanhar avaliações de segurança, auditorias e riscos, apoiando a governança de segurança.
• Contribuir para automação de segurança e integração de tooling.

Conhecimentos

Security & Identity management

Cloud operations

Patch management

Active Directory / Entra ID

RBAC / PIM

Ferramentas

WSUS

Red Hat Satellite

EDR

CMDB

Descrição da oferta de emprego

Descrição do cargo

Site Reliability Engineer (Security & Identity) m/f - Hybrid (Lisbon) Sysmatch is a Portuguese company that has been on the IT market for almost 20 years.

Our core business is IT Outsourcing and Software Development for the finance sector.

We invest a lot of effort on our client relationships and always deliver the best candidate or product available for their need and that is the main reason behind our success!

At the moment we are looking for the following candidate: Site Reliability Engineer (Security & Identity) m/f – Hybrid (Lisbon) – Goals and deliverables: Security & Platform Reliability – Ensure availability, stability, and security of Public Cloud services with a focus on identity layers.

• Deliver secure-by-design cloud operations aligned with corporate security frameworks and approved architectures.
• Act as a senior technical reference for security and identity reliability within the Cloud Services Platform Reliability team. Vulnerability & Patch Management- Deliver and maintain end to end vulnerability remediation across Windows and Linux cloud workloads.
• Operate WSUS and Red Hat Satellite as authoritative patching platforms and ensure consistent execution at scale.
• Produce regular patching compliance reports, including risk exposure, SLA breaches, and remediation status.
• Ensure patching baselines align with corporate security policies while minimizing service disruption. Identity & Access Management (AD / Entra ID)- Ensure secure operation of Active Directory and Entra ID environments according to IAM and security directives.
• Operationalizae the enforcement of least privilege access, RBAC, and Privileged Identity Management (PIM) across admin, service, and workload identities.
• Deliver periodic access reviews, audit evidence, and remediation actions for privileged access.
• Maintain compliant Active Directory OU structures, GPOs, delegation models, and admin separation. Security Controls & Compliance- Implement and validate cloud security controls in line with minimum security requirements and hardening standards.
• Ensure cloud services comply with approved security architectures and governance rules.
• Support security assessments, audits, and risk analyses for both new and existing cloud services.
• Drive remediation of non conformities and residual risks in coordination with security governance teams.
• Ensure mandatory security tooling (EDR, vulnerability scanning, logging, inventory agents) is deployed, operational, and monitored at scale.
• Deliver accurate security KPIs and dashboards covering coverage, health, and compliance of security agents.
• Maintain alignment between cloud assets and CMDB / inventory systems.
• Contribute to automation and standardization of security tooling integration.
• Act as a technical escalation point during cloud security or identity related incidents.
• Coordinate containment, remediation, and recovery actions with SOC, Cloud Security, IAM, and platform teams when engaged.
• Coordinate the build of incident post mortems, root cause analyses, and improvement actions.
• Ensure controlled execution of standard cloud changes aligned with operational and security requirements.
• Drive automation and Infrastructure as Code practices to enforce security and identity controls consistently.

• Salary classification according to the experience shown;
• Good working environment with young and dynamic teams;
• Integrationintoexciting and technologically innovative projects;
• Training plan andopportunitiesAnnual Gross Salary: ******€ - ******€ + Other Benefits