Platform Operations Engineer

Vodafone; Portugal; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Mobile phone plan

Discounts on Vodafone services

Recognition programs

Well-being program

Training platform access

Mobility opportunities

Job summary

A Vodafone procura um Platform Operations Engineer para liderar as operações diárias do CNAPP na cloud. O papel envolve garantir disponibilidade, governança de acesso e integração com SSO/IdP, bem como colaborar com equipas de segurança, engenharia e DevSecOps.

O candidato ideal possui formação em CS e experiência prática com ferramentas CNAPP e CI/CD, além de capacidades de comunicação para trabalhar com várias partes interessadas. O regime de trabalho é híbrido em Portugal.

Qualifications

• Formação superior em Ciência da Computação ou área relacionada.
• Experiência operacional com CNAPP/CSPM/CWPP/CIEM em ambiente de produção.
• Conhecimento de RBAC, gestão de acesso privilegiado e ciclo de vida de identidade.
• Integração de plataformas com SSO/IdP e controlo MFA/conditional access.

Responsibilities

• Operar CNAPP: monitorização, verificações de saúde, gestão de incidentes e planeamento de releases.
• Definir o modelo de suporte (L2/L3) e práticas operacionais, backlog de serviço e melhoria contínua.
• Manter configuração da plataforma, guardrails e padrões no ecossistema cloud.
• Desenhar RBAC alinhado ao modelo de segurança da Vodafone e segregação de funções.
• Gerir integrações com identidade, logging e pipelines CI/CD.

Skills

CNAPP

RBAC

SSO/IdP

MFA

CI/CD

Kubernetes

Python

PowerShell

SIEM

Cloud security

Education

Bacharelado/Mestrado em Ciência da Computação

Tools

Wiz

Prisma Cloud

Orca

Lacework

Defender for Cloud

Job description

Platform Operations Engineer

Empresa : Vodafone Tipo de Emprego : Periodo Integral Portugal

Descrição do Emprego - Platform Operations Engineer

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

Global Cyber Security’s role is to inspire trust and confidence in our customers by enabling secure connectivity. Our purpose is to proactively protect Vodafone & its customers by reducing the risks posed by security threats to Vodafone’s global technology infrastructure and the sensitive data it holds.

As the CNAPP Platform Operations lead/practitioner, you will own the day-to-day operation,stabilityand continuous improvement of Vodafone’s Cloud-Native Application Protection Platform (CNAPP).You will ensure robust RBAC and identity governance,reliableintegrationacross cloud environments and CI/CD toolchains, that findings are triaged and routed effectively, and that policies and controls are implemented in a pragmatic way that reduces risk without blocking delivery. You will collaborate closely with Cloud Security, Engineering,DevSecOps, SOC and Product teams to embed CNAPP into ways of working and to drive measurable improvements in cloud security posture.

What you’ll do

• Own CNAPP run operations: monitoring, health checks, incident management, vendor escalation and release/change planning;
• Manage CNAPP as a service: define support model (L2/L3), operational processes, service backlog and continuous improvement cadence;
• Maintain platform configuration, guardrails and standards across the cloud estate;
• Design and operate CNAPP RBAC aligned to Vodafone’s security model, ensuring least privilege and clear separation of duties;
• Define and manage role definitions, permission sets and administrative boundaries (e.g., Platform Admin vs Security Analyst vs Engineering Viewer);
• Implement and maintain SSO and identity integration with the corporate IdP (e.g., Entra ID/Azure AD), including MFA, conditional access and lifecycle controls;
• Own the joiner/mover/leaver process for CNAPP access: provisioning, periodic access reviews, recertification and removal;
• Manage service accounts/API tokens used for CNAPP connectors and automations, ensuring secure storage, rotation, and auditability;
• Drive governance for break-glass access and privileged actions: approvals, logging, and post-event review;
• Ensure CNAPP audit trails and identity events are captured and forwarded where required (e.g., SIEM), supporting investigation and compliance;
• Coordinate onboarding of new subscriptions/accounts/projects with correct connectors, permissions and data flows;
• Build/maintain integrations with identity, logging and workflow tooling (SSO/IdP, SIEM, ITSM ticketing, collaboration channels);
• Support integration into engineering toolchains (repos, CI/CD, container registries, IaC scanning, image scanning) where in scope;
• Act as the operational point of contact for engineers and LM stakeholders using CNAPP;
• Maintain operational documentation (runbooks, onboarding guides, RBAC model, access request flows, troubleshooting);
• Deliver enablement on secure onboarding, identity hygiene and best practice use of CNAPP.

Who you are

• Bachelor/Master Degree in Computer Science or related field;
• Proven experience operating a cloud security platform (CNAPP/CSPM/CWPP/CIEM/Vulnerability tooling) in a production enterprise environment;
• Strong understanding of RBAC, privileged access management concepts, and identity lifecycle processes (JML, recertification, access reviews);
• Hands-on experience integrating platforms with enterprise SSO/IdP and enforcing controls such as MFA and conditional access;
• Strong understanding of cloud security fundamentals: identity and access, network exposure, vulnerability management, container/Kubernetes concepts, cloud configuration controls;
• Experience integrating security tooling into enterprise ecosystems (SIEM, ITSM, CI/CD pipelines, repos, ticketing and collaboration tools);
• Ability to translate risk findings into actionable remediation; confident influencing engineering and operational teams;
• Operational capability: incident/problem management, change/release coordination, platform monitoring and vendor management;
• Strong stakeholder management and clear communication; comfortable producing concise updates for senior audiences;
• Experience with Wiz (or similar CNAPP tooling such as Prisma Cloud, Orca, Lacework, Defender for Cloud);
• C IEM /identity posture experience (entitlement analysis, excessive privilege detection, least privilege programmes);
• Automation /scripting (Python/PowerShell) and API-based integrations;
• Familiarity with governance frameworks (CIS, NIST, ISO 27001) and mapping controls into platform policy;
• Experience operating in a federated / multi-market environment;
• Fluency in English.

Not a perfect fit?

Worried that you don’t meet all the desired criteria exactly? At Vodafone we are passionate about empowering people and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to still apply as you may be the right candidate for this role or another opportunity.

What's in it for you

• Hybrid Work Model -Flexible hybrid work model with 8-10 in-office days per month, managed by team leaders;
• Vodafone Products and Services - Employees get a mobile phone, free communication plan, data card, and various discounts on services and products;
• Recognition - Recognition programs for innovative, creative, high-potential employees and exemplary behaviors;
• Health and Well-being - Well-being Program offers nutrition and psychological consultations, webinars, workshops, and discounts on various services and products;
• Learning - Access to Communities of Practice and a customizable digital training platform with high-quality content (namely Harvard Business Publishing, Skillsoft and Speexx);
• Local and International Mobility - Internal recruitment with local and international rotation opportunities across departments and roles

Who we are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.