Cloud Security Architect — Zero Trust & DevSecOps Lead

Allianz Services Gmbh Sucursal En España; Lisboa; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Bonus scheme

Pension

Employee stock program

Employee discounts

Job summary

Allianz seeks an Information Security Solution Architect – Cloud Security to drive the design, governance, and evolution of enterprise cloud security across major hyperscalers (AWS, Azure, GCP). Hybrid work model with international collaboration and potential days abroad.

You will lead CSPM, CWPP, CIEM, DevSecOps practices, translate regulatory requirements into cloud security controls, and partner with engineering and senior leadership to strengthen our security posture.

Qualifications

• Bachelor's degree in Information Security or related field.
• 5+ years of experience in Cloud Security Architecture or Cloud Security Engineering.
• Hands-on experience with AWS, Azure, or Google Cloud Platform in enterprise environments.

Responsibilities

• Design and maintain enterprise cloud security architectures across major hyperscalers.
• Provide architectural guidance on CSPM, CWPP, CIEM, and DevSecOps.
• Draft, review, and maintain cloud security policies and baselines.
• Define and track cloud security KPIs/KRIs and present governance reporting.
• Contribute to ARB processes and act as cloud security advisor to engineering teams.

Skills

Cloud security architecture

Zero Trust principles

Governance & risk management

DevSecOps practices

Stakeholder communication

Education

Bachelor's degree in Information Security or related field

Tools

CSPM tools

CWPP tools

CIEM tools

IaC security scanning

Secrets management tooling

Job description

Allianz seeks an Information Security Solution Architect – Cloud Security to drive the design, governance, and evolution of enterprise cloud security across major hyperscalers (AWS, Azure, GCP). Hybrid work model with international collaboration and potential days abroad.

You will lead CSPM, CWPP, CIEM, DevSecOps practices, translate regulatory requirements into cloud security controls, and partner with engineering and senior leadership to strengthen our security posture.