Cloud Security Engineer

Nimber; Porto; Hybrid; EUR 65,000 - 90,000; Full time

Job summary

Nimber is seeking an experienced Cloud Security Engineer to join a team central to IT security within the banking sector. The role spans Porto and France, focusing on security, governance and compliance of public cloud environments.

You will design, implement and maintain security controls, ensure policy compliance, and automate security through IaC while collaborating with international teams across multiple regions.

Qualifications

• Minimum 5 years of experience in Cloud Security or similar roles.
• Strong expertise in Microsoft Azure or Google Cloud Platform (GCP).
• Experience designing and implementing secure cloud architectures.
• Solid understanding of IAM principles, including Least Privilege and RBAC.
• Experience with cloud governance controls using Azure Policy or GCP Organization Policies.
• Experience with Terraform, Git, Jenkins and CI/CD pipelines for IaC.

Responsibilities

• Design, implement and maintain security controls across cloud environments, including IAM, data protection and governance.
• Ensure compliance with BPCE Group's cloud security policies and standards.
• Conduct cloud security assessments, identify vulnerabilities and mitigate risks.
• Review and validate security architectures for cloud projects.
• Assess security of PaaS solutions and run PoCs as needed.
• Automate security processes and configurations via IaC.
• Monitor emerging cloud security threats and industry best practices.

Skills

Cloud security engineering

IAM principles (least privilege, RBAC)

Security architecture design

Governance & compliance

Infrastructure as Code

Threat monitoring & best practices

Analytical problem solving

Collaboration in international teams

Tools

Terraform

Git

Jenkins

CI/CD pipelines

Azure Policy

GCP Organization Policies

Python scripting

Job description

We are looking for an experienced Cloud Security Engineer to join a Cloud Security team operating at the core of IT Security within the banking sector.

You will work as part of a multidisciplinary team based in Porto and France, contributing to the security, governance and compliance of public cloud environments.

Key Responsibilities

• Design, implement and maintain security controls across cloud environments, covering Identity and Access Management (IAM), data protection and security governance.
• Ensure compliance with the BPCE Group's cloud security policies and standards.
• Conduct cloud security assessments, identify vulnerabilities and recommend risk mitigation measures.
• Review and validate security architectures for critical cloud-based business projects.
• Assess the security of Platform as a Service (PaaS) solutions, including proof-of-concept activities.
• Implement and enforce governance policies using native cloud security tools.
• Automate security processes and infrastructure configurations through Infrastructure as Code (IaC).
• Monitor emerging cloud security threats, technologies and industry best practices.

Requirements

• Minimum 5 years of experience in Cloud Security or similar roles.
• Strong expertise in Microsoft Azure or Google Cloud Platform (GCP); experience with both is highly valued.
• Proven experience designing and implementing secure cloud architectures.
• Solid understanding of IAM principles, including Least Privilege and Role-Based Access Control (RBAC).
• Experience conducting security assessments of PaaS services and defining risk mitigation strategies.
• Hands‑on experience implementing cloud governance controls using Azure Policy or GCP Organization Policies.
• Familiarity with cloud security frameworks, compliance requirements and industry best practices.
• Experience with Terraform, Git, Jenkins and CI/CD pipelines for infrastructure automation.
• Strong analytical and problem-solving skills.
• Proactive attitude, adaptability and the ability to collaborate effectively within international teams.

Nice to Have

• Experience with Amazon Web Services (AWS).
• Python scripting skills.
• Familiarity with third‑party cloud security and governance tools.

What We Offer

At Nimber, you'll have the opportunity to contribute to challenging cloud security projects within an international banking environment, working alongside experienced professionals and helping strengthen the security of critical cloud infrastructures.