Cloud Engineer

Shakers; Lisboa; Presencial; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

Shakers, a global technology firm, is seeking an Azure Cloud Security Engineer to join its Cybersecurity Center of Excellence. You will secure Azure landing zones and the IaaS/PaaS services running on them, partnering with cloud platform, infrastructure, networking and DevOps teams.

You will implement security controls, manage identity and access, network security, and CSPM posture, while promoting secure CI/CD practices and cloud governance across Azure environments.

Qualificações

• Bachelor's degree in IT, Computer Science, Cybersecurity, Engineering or related field.
• 1–3 years hands-on Azure cloud engineering or security experience.
• Solid knowledge of Azure landing zones: management groups, subscriptions, resource organization, policy implementation, access control.
• Experience with Azure networking: VNets, subnets, NSGs, Azure Firewall, private connectivity.
• Experience with Azure IAM: RBAC, managed identities, least privilege access.
• Basic IaC experience with Terraform, Bicep or ARM templates.
• Fluent English, written and verbal.

Responsabilidades

• Implement and validate security controls for Azure IaaS and PaaS resources against defined security baselines.
• Support implementation and troubleshooting of Azure identity and access controls: RBAC, managed identities, least privilege permissions.
• Implement and fine tune network security controls: NSGs, Azure Firewall, private endpoints, network segmentation.
• Participate in security assessments and reviews of cloud architectures, identifying risks in cloud native services and proposing mitigations.
• Define and promote security controls across CI/CD pipelines, embedding security into build, test and deployment.
• Own cloud security posture monitoring and lead remediation of CSPM findings.
• Enforce cloud governance across Azure environments, configuring and maintaining Azure Policies.
• Champion cloud security best practices and mentor colleagues across cloud focused teams.

Conhecimentos

RBAC

Least privilege access

Azure security

CI/CD security

English fluency

Formação académica

Bachelor's degree in IT/CS/Cybersecurity/Engineering

Ferramentas

Terraform

Bicep

ARM templates

Descrição da oferta de emprego

Azure Cloud Security Engineer

Join a global technology firm as an Azure Cloud Security Engineer inside its Cybersecurity Center of Excellence, securing Azure landing zones and the IaaS/PaaS services running on them.

The challenge

Cloud environments grow faster than the guardrails around them. You will make sure they do not: designing, implementing and validating the security controls that keep Azure landing zones compliant, segmented and least privilege by default, working shoulder to shoulder with cloud platform, infrastructure, networking and DevOps teams.

Responsibilities

• Implement and validate security controls for Azure IaaS and PaaS resources against defined security baselines.
• Support implementation and troubleshooting of Azure identity and access controls: RBAC, managed identities, least privilege permissions.
• Implement and fine tune network security controls: NSGs, Azure Firewall, private endpoints, network segmentation.
• Participate in security assessments and reviews of cloud architectures, identifying risks in cloud native services and proposing mitigations.
• Define and promote security controls across CI/CD pipelines, embedding security into build, test and deployment.
• Own cloud security posture monitoring and lead remediation of CSPM findings.
• Enforce cloud governance across Azure environments, configuring and maintaining Azure Policies.
• Champion cloud security best practices and mentor colleagues across cloud focused teams.

Requirements

• Bachelor's degree in IT, Computer Science, Cybersecurity, Engineering or a related field, or equivalent practical experience.
• 1 to 3 years of hands on experience in Azure cloud engineering, cloud security or infrastructure roles, deploying, configuring and supporting Azure IaaS and PaaS.
• Solid working knowledge of Azure landing zones: management groups, subscriptions, resource organization, policy implementation, access control.
• Practical experience with Azure networking: VNets, subnets, NSGs, Azure Firewall, private connectivity.
• Proven experience with Azure IAM: RBAC, managed identities, least privilege access.
• Basic experience with Infrastructure as Code: Terraform, Bicep or ARM templates.
• Fluent English, written and verbal.

Nice to have

• Experience supporting or leading Azure landing zone implementations and advanced network security components.
• Hands on experience with Azure Policy and familiarity with CSPM tools.
• AZ-500 or AZ-104 certification, or equivalent cloud/cybersecurity certifications.
• Familiarity with DevSecOps principles and security in CI/CD pipelines.

Why this project

Long term, full time engagement inside a Cybersecurity CoE at a global technology firm, with real ownership over cloud security posture and visibility across platform, networking and DevOps teams. Not a ticket queue: hands on implementation plus design input on how the Azure estate is secured.

If you want your fingerprints on how a large Azure estate is secured, this is the one.

#CloudSecurity #Azure #DevSecOps #Cybersecurity #Shakers