AVP Cloud Security Engineer — Hybrid with Remote Fridays

iCapital; Lisboa; Hybrid; EUR 140,000 - 190,000; Full time

Benefits offered by this job

Equity

Health insurance

Paid time off

Annual bonus

Job summary

iCapital is seeking an Assistant Vice President, Cyber Cloud Security Engineer to join the Security Engineering team. This role will establish and manage cloud security programs, build new security architecture, and drive automation across iCapital's technology landscape.

The ideal candidate is a deeply technical individual contributor who can research, design, and implement security technologies, and collaborate effectively across teams and functions.

Qualifications

• 6–9 years of experience in cloud environments, with AWS as the primary platform.
• Hands-on expertise in cloud security architecture and infrastructure design.
• Proficiency with AWS-native security services (IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, GuardDuty).
• Experience with cloud identity and access architecture (federation, RBAC/ABAC).
• IaC tooling: AWS CDK, CloudFormation, Terraform.
• Nice to have certifications (AWS CS/S, CISSP, CCSP).

Responsibilities

• Build and manage cloud security programs across AWS, Azure, and GCP.
• Design, implement, and validate secure cloud architectures meeting security standards.
• Apply Zero Trust principles to cloud design and access models.
• Drive automation for continuous monitoring and remediation of cloud vulnerabilities.
• Collaborate with engineering to embed security early in the development lifecycle.
• Support risk, governance, and policy development for cloud security.

Skills

Cloud security architecture

Cloud security engineering

Security automation

Tools

AWS IAM

AWS Config

KMS

Secrets Manager

CloudWatch

CloudTrail

GuardDuty

Okta federation

Terraform

CloudFormation

AWS CDK

Job description

iCapital is seeking an Assistant Vice President, Cyber Cloud Security Engineer to join the Security Engineering team. This role will establish and manage cloud security programs, build new security architecture, and drive automation across iCapital's technology landscape.

The ideal candidate is a deeply technical individual contributor who can research, design, and implement security technologies, and collaborate effectively across teams and functions.