Cloud Security Engineer

Nimber; Porto; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Nimber is seeking an experienced Cloud Security Engineer to join a core IT Security team in the banking sector, with a footprint in Porto and France. You will design, implement and govern security controls across cloud environments, focusing on IAM, data protection and governance while aligning with BPCE Group policies.

The role requires strong Azure or GCP experience, PaaS assessments, and proficiency with Terraform, Git, Jenkins and CI/CD pipelines.

Qualifications

• Minimum 5 years of experience in Cloud Security or similar roles.
• Strong expertise in Microsoft Azure or Google Cloud Platform (GCP).
• Experience designing and implementing secure cloud architectures.
• Solid understanding of IAM principles, including Least Privilege and RBAC.
• Experience conducting security assessments of PaaS services and defining risk mitigation strategies.
• Hands-on experience implementing cloud governance controls using Azure Policy or GCP Organization Policies.
• Familiarity with cloud security frameworks, compliance requirements and industry best practices.

Responsibilities

• Design, implement and maintain security controls across cloud environments, covering IAM, data protection and security governance.
• Ensure compliance with BPCE Group's cloud security policies and standards.
• Conduct cloud security assessments, identify vulnerabilities and recommend risk mitigation measures.
• Review and validate security architectures for critical cloud-based business projects.
• Assess the security of Platform as a Service (PaaS) solutions, including proof-of-concept activities.
• Implement and enforce governance policies using native cloud security tools.
• Automate security processes and infrastructure configurations through Infrastructure as Code (IaC).
• Monitor emerging cloud security threats, technologies and industry best practices.

Skills

IAM principles

Cloud security architectures

Security assessments

Governance

Tools

Terraform

Git

Jenkins

CI/CD pipelines

Job description

We are looking for an experienced Cloud Security Engineer to join a Cloud Security team operating at the core of IT Security within the banking sector.

You will work as part of a multidisciplinary team based in Porto and France, contributing to the security, governance and compliance of public cloud environments.

Key Responsibilities

• Design, implement and maintain security controls across cloud environments, covering Identity and Access Management (IAM), data protection and security governance.
• Ensure compliance with the BPCE Group's cloud security policies and standards.
• Conduct cloud security assessments, identify vulnerabilities and recommend risk mitigation measures.
• Review and validate security architectures for critical cloud-based business projects.
• Assess the security of Platform as a Service (PaaS) solutions, including proof-of-concept activities.
• Implement and enforce governance policies using native cloud security tools.
• Automate security processes and infrastructure configurations through Infrastructure as Code (IaC).
• Monitor emerging cloud security threats, technologies and industry best practices.

Requirements

• Minimum 5 years of experience in Cloud Security or similar roles.
• Strong expertise in Microsoft Azure or Google Cloud Platform (GCP); experience with both is highly valued.
• Proven experience designing and implementing secure cloud architectures.
• Solid understanding of IAM principles, including Least Privilege and Role-Based Access Control (RBAC).
• Experience conducting security assessments of PaaS services and defining risk mitigation strategies.
• Hands‑on experience implementing cloud governance controls using Azure Policy or GCP Organization Policies.
• Familiarity with cloud security frameworks, compliance requirements and industry best practices.
• Experience with Terraform, Git, Jenkins and CI/CD pipelines for infrastructure automation.
• Strong analytical and problem-solving skills.
• Proactive attitude, adaptability and the ability to collaborate effectively within international teams.

Nice to Have

• Experience with Amazon Web Services (AWS).
• Python scripting skills.
• Familiarity with third‑party cloud security and governance tools.

What We Offer

At Nimber, you'll have the opportunity to contribute to challenging cloud security projects within an international banking environment, working alongside experienced professionals and helping strengthen the security of critical cloud infrastructures.