Cloud Security Engineer | Senior

Hexa Consulting; Porto; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Private health insurance

Mental health support

Training & certifications

Career development

Cloud upskilling

Flexible work context

Childcare vouchers

Job summary

Hexa Consulting in Porto seeks a Cloud Security Engineer to strengthen public cloud security within the banking sector. Based in Porto, you will join an international, multidisciplinary team to implement security controls and ensure compliance across enterprise cloud environments.

You will design secure cloud architectures, assess risks, and collaborate with technical teams to promote ongoing improvement and governance. The role emphasizes automation and proactive security leadership.

Qualifications

• 6–9 years of professional experience, including at least 5 years in cloud security or similar roles.
• Strong Azure or Google Cloud Platform (GCP) expertise and secure architecture design.
• Knowledge of cloud governance, compliance and risk management.

Responsibilities

• Implement and enforce cloud security controls covering identity, access, network protection and data security.
• Assess cloud architectures and identify security risks in critical business applications.
• Ensure compliance with internal security policies and cloud governance requirements.
• Conduct security assessments of PaaS services and recommend risk mitigation measures.
• Configure cloud governance controls using native security tools.
• Automate security processes and infrastructure configurations through Infrastructure as Code (IaC).
• Collaborate with technical teams to promote secure cloud architecture and continuous improvement.
• Monitor emerging cloud security threats, technologies and best practices.

Skills

Cloud security

Azure/GCP expertise

IAM & RBAC

Network security

Governance & compliance

Risk assessment

IaC automation

Tools

Terraform

Job description

Join Hexa as a Cloud Security Engineer and help strengthen public cloud security within the banking sector.

Based in Porto, you will work with an international, multidisciplinary team to implement security controls, assess cloud architectures and ensure compliance with security requirements across enterprise cloud environments.

WHAT YOU WILL DO

• Implement and enforce cloud security controls covering identity, access, network protection and data security.
• Assess cloud architectures and identify security risks in critical business applications.
• Ensure compliance with internal security policies and cloud governance requirements.
• Conduct security assessments of PaaS services and recommend risk mitigation measures.
• Configure cloud governance controls using native security tools.
• Automate security processes and infrastructure configurations through Infrastructure as Code (IaC).
• Collaborate with technical teams to promote secure cloud architecture and continuous improvement.
• Monitor emerging cloud security threats, technologies and best practices.

WHAT WE ARE LOOKING FOR

• 6 to 9 years of professional experience, including at least 5 years in cloud security or similar roles.
• Strong expertise in Azure or Google Cloud Platform (GCP).
• Experience designing and implementing secure cloud architectures.
• Solid understanding of cloud security governance, compliance and risk management.
• Ability to assess technical risks and provide practical security recommendations.
• Analytical thinking, autonomy and a proactive approach to problem-solving.
• Strong collaboration skills, adaptability and a responsible approach to delivery.

TECHNICAL SKILLS

• Microsoft Azure or Google Cloud Platform (GCP).
• Cloud security architecture, governance and compliance.
• Identity and Access Management (IAM), RBAC and least privilege principles.
• Network security, security perimeters and data protection.
• Azure Policy and GCP Organization Policies.
• PaaS security assessments and risk analysis.
• Terraform and Infrastructure as Code (IaC).

NICE TO HAVE

• Experience with both Azure and GCP.
• Knowledge of AWS security services.
• Python scripting for security automation.
• Experience with third-party cloud security governance tools.

WHAT WE OFFER

• Private health insurance from day one, with optional family coverage.
• Free, confidential mental health support.
• Continuous training, certifications and career development.
• Upskilling in information security, cloud security and cybersecurity best practices.
• Flexibility whenever the role and operational context allow it.
• Childcare vouchers and family support initiatives.
• Team activities, knowledge sharing and accessible leadership.

EQUAL OPPORTUNITY

Hexa promotes an inclusive workplace where different backgrounds, perspectives and experiences are valued. In alignment with the Portuguese Diversity Charter, we are committed to equal opportunities, fairness and mutual respect.

HEXA LIFE

At Hexa, we are all Builders.

Our culture is built on Honesty, Mutual Support and Agility. We value ownership, collaboration and continuous learning, creating an environment where every professional contributes to meaningful solutions and lasting relationships.