Staff Azure Platform Engineer - Cloud Security Leader (Remote)

Shine (formerly Ageras); Porto; Remote; EUR 110,000 - 150,000; Full time

Benefits offered by this job

Fully remote in Europe

Hybrid in European hubs

Job summary

Shine's Infrastructure & IT unit is seeking a Staff Platform Engineer (Infrastructure Security) to own Azure security across our cloud estate, and to drive multi-cloud security alignment with secure defaults built using Terraform. This is a hands-on senior IC role with cross-cloud responsibilities and a focus on policy guardrails and secure-by-default design.

You will architect the Azure landing zone, secure Entra ID, onboard CNAPP platforms, and automate compliance evidence for ISO 27001, GDPR,

Qualifications

• 8+ years in infrastructure or security engineering with Azure security at production scale.

Responsibilities

• Define the Azure security architecture and policy guardrails.
• Own the security of the Azure landing zone and secure migrations.
• Secure Entra ID, including CA, PIM, workload identity.
• Co-own CNAPP onboarding and posture management.
• Build security controls as code with Terraform and Azure Policy.
• Ensure on-prem Azure migrations are secure and validated.
• Threat modelling to identify attack paths and prioritize controls.
• Automate compliance evidence for ISO 27001, GDPR, and DORA.
• Align Azure security with AWS and GCP for a coherent multi-cloud posture.
• Enable teams via security reviews and self-serve patterns.

Skills

Azure security

Entra ID security

Terraform IaC

Threat modelling

CNAPP tooling

Defender for Cloud

SIEM experience

Cross-cloud security

English communication

Cloud architecture

Tools

Wiz

Cortex Cloud

Orca

FortiCNAPP

Okta

Defender CSPM

Job description

Shine's Infrastructure & IT unit is seeking a Staff Platform Engineer (Infrastructure Security) to own Azure security across our cloud estate, and to drive multi-cloud security alignment with secure defaults built using Terraform. This is a hands-on senior IC role with cross-cloud responsibilities and a focus on policy guardrails and secure-by-default design.

You will architect the Azure landing zone, secure Entra ID, onboard CNAPP platforms, and automate compliance evidence for ISO 27001, GDPR,