Cloud Security Engineer

Hexa Consulting; Porto; Híbrido; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Mental health support

Training & certs

Career development

Flexible work

Childcare support

Team activities

Descripción de la vacante

Hexa Consulting in Porto is seeking a Cloud Security Engineer to strengthen public cloud security within the banking sector. You will work with an international, multidisciplinary team to implement security controls, assess cloud architectures and ensure compliance across enterprise cloud environments.

The role is hybrid (in-office 2 days per week) and requires 6–9 years of experience, with at least 5 years in cloud security, and strong knowledge of Azure or GCP.

Formación

• 6–9 years of professional experience, including ≥5 years in cloud security.
• Strong expertise in Azure or Google Cloud Platform (GCP).
• Experience designing and implementing secure cloud architectures.
• Understanding of cloud security governance, compliance and risk management.
• Ability to assess risks and provide practical security recommendations.
• Analytical thinking, autonomy and proactive problem-solving.
• Strong collaboration and delivery-focused mindset.

Responsabilidades

• Implement and enforce cloud security controls covering identity, access, network protection and data security.
• Assess cloud architectures and identify security risks in critical business applications.
• Ensure compliance with internal security policies and cloud governance requirements.
• Conduct security assessments of PaaS services and recommend risk mitigation measures.
• Configure cloud governance controls using native security tools.
• Automate security processes and infrastructure configurations through Infrastructure as Code (IaC).
• Collaborate with technical teams to promote secure cloud architecture and continuous improvement.
• Monitor emerging cloud security threats, technologies and best practices.

Conocimientos

Cloud security

Analytical thinking

Autonomy

Proactive problem-solving

Collaboration

Delivery-oriented

Herramientas

Azure

GCP

IAM

RBAC

Terraform

CI/CD

Git

Jenkins

Descripción del empleo

Join Hexa as a Cloud Security Engineer and help strengthen public cloud security within the banking sector.

Based in Porto, you will work with an international, multidisciplinary team to implement security controls, assess cloud architectures and ensure compliance with security requirements across enterprise cloud environments.

• Hybrid 2x per week in office

WHAT YOU WILL DO

• Implement and enforce cloud security controls covering identity, access, network protection and data security.
• Assess cloud architectures and identify security risks in critical business applications.
• Ensure compliance with internal security policies and cloud governance requirements.
• Conduct security assessments of PaaS services and recommend risk mitigation measures.
• Configure cloud governance controls using native security tools.
• Automate security processes and infrastructure configurations through Infrastructure as Code (IaC).
• Collaborate with technical teams to promote secure cloud architecture and continuous improvement.
• Monitor emerging cloud security threats, technologies and best practices.

WHAT WE ARE LOOKING FOR

• 6 to 9 years of professional experience, including at least 5 years in cloud security or similar roles.
• Strong expertise in Azure or Google Cloud Platform (GCP).
• Experience designing and implementing secure cloud architectures.
• Solid understanding of cloud security governance, compliance and risk management.
• Ability to assess technical risks and provide practical security recommendations.
• Analytical thinking, autonomy and a proactive approach to problem-solving.
• Strong collaboration skills, adaptability and a responsible approach to delivery.

TECHNICAL SKILLS

• Microsoft Azure or Google Cloud Platform (GCP).
• Cloud security architecture, governance and compliance.
• Identity and Access Management (IAM), RBAC and least privilege principles.
• Network security, security perimeters and data protection.
• Azure Policy and GCP Organization Policies.
• PaaS security assessments and risk analysis.
• Terraform and Infrastructure as Code (IaC).
• Git, Jenkins and CI/CD pipelines.
• Security automation and cloud configuration management.

NICE TO HAVE

• Experience with both Azure and GCP.
• Knowledge of AWS security services.
• Python scripting for security automation.
• Experience with third-party cloud security governance tools.

WHAT WE OFFER

• Private health insurance from day one, with optional family coverage.
• Free, confidential mental health support.
• Continuous training, certifications and career development.
• Upskilling in information security, cloud security and cybersecurity best practices.
• Flexibility whenever the role and operational context allow it.
• Childcare vouchers and family support initiatives.
• Team activities, knowledge sharing and accessible leadership.

EQUAL OPPORTUNITY

Hexa promotes an inclusive workplace where different backgrounds, perspectives and experiences are valued. In alignment with the Portuguese Diversity Charter, we are committed to equal opportunities, fairness and mutual respect.

HEXA LIFE

At Hexa, we are all Builders.

Our culture is built on Honesty, Mutual Support and Agility. We value ownership, collaboration and continuous learning, creating an environment where every professional contributes to meaningful solutions and lasting relationships.