Senior Cloud DevSecOps Engineer | Hybrid | Aveiro

A2IT Technology; Aveiro; Híbrido; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

A2IT Technology in Portugal is seeking a Senior Cloud DevSecOps Engineer to design, build, and optimize scalable multi-cloud infrastructures with a security-first mindset. You will refine IAM policies across AWS, Azure, and GCP, enforce least privilege, collaborate with Security, Software Engineering and DevOps, and integrate Secure SDLC practices into CI/CD pipelines.

The role requires 3+ years in cloud, IAM, Kubernetes security, IaC, scripting, and fluent Portuguese and English; hybrid work

Qualificações

• 3+ years of experience with cloud platforms (Azure, AWS, or GCP) including IAM, Kubernetes security, cloud networking, and IAM policies.
• Strong knowledge of Secure SDLC practices, DevSecOps, Infrastructure as Code (Terraform or equivalent), and CI/CD security integration.
• Proficiency in Portuguese and English, both written and spoken.

Responsabilidades

• Analyze and refine IAM policies, implementing the Principle of Least Privilege across cloud environments.
• Collaborate with Security, Software Engineering and DevOps to strengthen security posture of IAM policies.
• Work with development teams to validate IAM policies for functionality and performance through QA checks.
• Stay current with security trends, compliance, and tools, driving continuous security improvements.

Conhecimentos

IAM (Identity & Access Management)

Kubernetes security

Cloud platforms (AWS/Azure/GCP)

Infrastructure as Code (Terraform)

Security in CI/CD pipelines

Scripting (Python)

PowerShell

Portuguese language

English language

Ferramentas

Prisma Cloud

Wiz

Snyk

Docker

Kubernetes

Descrição da oferta de emprego

We’re looking for a Senior Cloud DevSecOps Engineer to join a dynamic team and play a key role in designing, building, and optimizing scalable multi-cloud infrastructures.

Security-focused project related to the Anycloud initiative, or supporting the expansion of our DevOps-as-a-Service capabilities.

• Act as an upper intermediate/senior DevSecOps Engineer in the analysis and refinement of existing IAM policies, ensuring the implementation of the Principle of Least Privilege across cloud environments (AWS, Azure, GCP);
• Partner closely with Security, Software Engineering, and DevOps teams to strengthen the overall security posture related to IAM policies;
• Collaborate with development teams (service owners) to execute comprehensive QA validations, ensuring IAM policies perform as expected from both functional and performance perspectives;
• Stay up to date with security trends, vulnerabilities, compliance regulations, and emerging tools, driving continuous security improvements.
• 3+ years of proven experience with cloud platforms (Azure, AWS, or GCP), including strong expertise in Identity & Access Management (IAM), Kubernetes security, cloud networking, and IAM policies;
• Proficiency in spoken and written Portuguese and English;
• Strong understanding of Secure SDLC practices, DevSecOps methodologies, Infrastructure as Code (Terraform or equivalent), and security integration within CI/CD pipelines;
• Hands-on experience with scripting and automation using Python, PowerShell, or similar technologies;
• Excellent communication skills, with the ability to explain technical security risks and solutions to Development, DevOps, and Product teams;
• Strong problem-solving mindset and a collaborative approach to addressing security challenges.

Nice to Have:

• Experience with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud or Wiz;
• Knowledge of Application Security and SCA/SAST/DAST solutions, particularly Snyk.;
• Solid experience with container technologies such as Docker and expertise in managing and optimizing Kubernetes clusters.

Hybrid (2 days onsite)