Azure, Cloud and Security Engineer

Architecht; Pendik; On-site; TRY 250,000 - 420,000; Full time

Job summary

Architecht, a Kuveyt Türk subsidiary, seeks an Azure Infrastructure Engineer to design, deploy and optimize Azure platforms with security at the core. You will implement IaC, manage cloud security solutions, and coordinate across teams to meet regulatory and architectural standards.

Requirements include 2+ years in Azure, IaC tools, and strong English. The role focuses on Azure Landing Zone practices, Well-Architected Framework alignment, and continuous security improvements within a dynamic

Qualifications

• Bachelor’s degree in an engineering discipline or MIS.
• Minimum 2 years of hands-on Azure experience.
• Solid knowledge of Azure infrastructure components and services.
• IaC experience with Terraform and/or Ansible.
• Familiarity with Kubernetes security and network policies.
• Experience in cloud security domains like CSPM, CWPP, CNAPP.
• Knowledge of Defender for Cloud, Azure Policy, and RBAC.
• Strong analytical and multi-project coordination skills.
• Good command of English for technical docs.

Responsibilities

• Design, deploy, manage and optimize Azure infrastructure and platform services.
• Ensure performance, security and compliance of Azure resources.
• Coordinate cloud security solution deployment (CSPM, CWPP, CNAPP).
• Deploy and manage security services such as Azure Firewall, WAF, Load Balancer.
• Integrate infrastructure changes into IaC and CI/CD pipelines.
• Monitor security hardening, including NSG rules and Defender improvements.
• Maintain documentation and coordinate with business units.
• Support multi-provider cloud design and operation.

Skills

Microsoft Azure

IaC

Terraform

Ansible

Kubernetes/AKS

Cloud security

RBAC

CI/CD

Security hardening

Networking security

Azure Defender/Cloud security

Education

Bachelor’s degree in Computer Engineering, Mathematics Engineering, Electrical & Electronics Engineering, MIS, or related

Tools

Terraform

Ansible

AKS

Azure Monitor/ Defender

CI/CD pipelines

NSG/Private Endpoints

Job description

Company Profile

As a subsidiary of Kuveyt Türk, Architecht expands its innovative digital products and services on a global scale.

• Our technology company exports the BOA Banking Platform, developed at our R&D Center, to 20 countries. In addition to traditional and platform banking solutions, we focus on open banking, cloud technologies, advanced analytics, artificial intelligence, and mobile security solutions.

Qualifications

• Bachelor’s degree from an accredited university in Computer Engineering, Mathematics Engineering, Electrical & Electronics Engineering, Management Information Systems, or a related engineering discipline
• Minimum 2 years of hands-on experience with Microsoft Azure
• Solid knowledge of Azure infrastructure components such as virtual machines, virtual networks, load balancers, AKS, VPN connections, and related services
• Experience with Infrastructure as Code (IaC) and automation tools such as Terraform and/or Ansible
• Familiarity with network security, segmentation, and access control in Kubernetes/AKS environments (e.g. network policies, service mesh concepts)
• Experience in cloud security domains such as CSPM, CWPP, and CNAPP
• Knowledge of Microsoft Defender for Cloud, Azure Policy, RBAC (Role-Based Access Control), and other Azure security capabilities
• Strong analytical thinking, problem-solving skills, and a research-oriented mindset
• Ability to work on multiple concurrent projects
• Good command of English, both written and spoken, sufficient to follow technical documentation and industry developments
• For male candidates: completion of military service, exemption, or deferment for at least 2 years
• Preferably holding relevant certifications such as AZ-104 / AZ-305 / AZ-500, CCNA, CISSP, or similar

Job Description

• Designing, deploying, managing, and optimizing Azure infrastructure and platform services in line with Azure Landing Zone and Well-Architected Framework principles
• Ensuring performance, security, and compliance standards of Azure infrastructure and platform services
• Coordinating the implementation, management, and vulnerability findings of cloud security solutions (CSPM, CWPP, CNAPP)
• Deploying and managing cloud infrastructure security services such as Azure Firewall, WAF, Load Balancer, and related components
• Supporting the design, deployment, and operation of services obtained from different cloud service providers
• Designing network and cloud security controls in compliance with regulatory and audit requirements, including PCI-DSS and ISO 27001
• Automating infrastructure changes by integrating them into IaC and CI/CD pipelines
• Performing and regularly monitoring security hardening on Azure resources (e.g. NSG rules, Private Endpoints, storage access restrictions, Secure Score and Defender improvements)
• Monitoring, troubleshooting, and continuously improving infrastructure and platform services
• Managing change processes, coordinating with business units, and maintaining proper documentation