Azure, Cloud and Security Engineer

Architecht; Pendik; On-site; TRY 300,000 - 540,000; Full time

Job summary

Architecht, a Kuveyt Türk subsidiary, seeks an experienced Cloud Security Engineer to design, deploy, and secure Azure infrastructure and platform services in line with Well-Architected Framework principles. You will implement CSPM, CWPP, CNAPP, and automate infra changes via IaC and CI/CD pipelines.

The role requires 2+ years of Azure experience, strong AKS, Terraform/Ansible skills, and good English. Male candidates must complete/defer military service as required by regulations.

Qualifications

• Bachelor’s degree in engineering or related field
• Minimum 2 years hands-on experience with Microsoft Azure
• Solid knowledge of Azure infrastructure components (VMs, VNets, load balancers, AKS, VPNs)
• Experience with IaC and automation tools (Terraform/Ansible)
• Familiarity with network security in Kubernetes/AKS environments
• Experience in cloud security domains (CSPM, CWPP, CNAPP)
• Knowledge of Defender for Cloud, RBAC, and Azure security capabilities
• Strong analytical and problem-solving skills
• Ability to manage multiple projects
• Good command of English
• Male candidates: military service completion or deferment
• Certs such as AZ-104/AZ-305/AZ-500, CCNA, CISSP are preferred

Responsibilities

• Design and deploy Azure infrastructure and platform services
• Ensure performance, security, and compliance of Azure components
• Coordinate cloud security solutions (CSPM, CWPP, CNAPP)
• Deploy and manage security services (Azure Firewall, WAF, Load Balancer)
• Support deployments from multiple cloud providers
• Design security controls in line with PCI-DSS and ISO 27001
• Automate changes via IaC and CI/CD pipelines
• Monitor and improve infrastructure and platform security
• Maintain documentation and coordinate with business units

Skills

Azure security

English proficiency

Analytical thinking

Multi-project management

Education

Bachelor’s degree in Computer Engineering, Mathematics Engineering, Electrical & Electronics Engineering, MIS

Tools

Terraform

Ansible

AKS

Azure Firewall

WAF

Azure Policy

Job description

As a subsidiary of Kuveyt Türk, Architecht expands its innovative digital products and services on a global scale.

• Our technology company exports the BOA Banking Platform, developed at our R&D Center, to 20 countries. In addition to traditional and platform banking solutions, we focus on open banking, cloud technologies, advanced analytics, artificial intelligence, and mobile security solutions.

Qualifications

• Bachelor’s degree from an accredited university in Computer Engineering, Mathematics Engineering, Electrical & Electronics Engineering, Management Information Systems, or a related engineering discipline
• Minimum 2 years of hands‑on experience with Microsoft Azure
• Solid knowledge of Azure infrastructure components such as virtual machines, virtual networks, load balancers, AKS, VPN connections, and related services
• Experience with Infrastructure as Code (IaC) and automation tools such as Terraform and/or Ansible
• Familiarity with network security, segmentation, and access control in Kubernetes/AKS environments (e.g. network policies, service mesh concepts)
• Experience in cloud security domains such as CSPM, CWPP, and CNAPP
• Knowledge of Microsoft Defender for Cloud, Azure Policy, RBAC (Role-Based Access Control), and other Azure security capabilities
• Strong analytical thinking, problem‑solving skills, and a research‑oriented mindset
• Ability to work on multiple concurrent projects
• Good command of English, both written and spoken, sufficient to follow technical documentation and industry developments
• For male candidates: completion of military service, exemption, or deferment for at least 2 years
• Preferably holding relevant certifications such as AZ-104 / AZ-305 / AZ-500, CCNA, CISSP, or similar

Job Description

• Designing, deploying, managing, and optimizing Azure infrastructure and platform services in line with Azure Landing Zone and Well-Architected Framework principles
• Ensuring performance, security, and compliance standards of Azure infrastructure and platform services
• Coordinating the implementation, management, and vulnerability findings of cloud security solutions (CSPM, CWPP, CNAPP)
• Deploying and managing cloud infrastructure security services such as Azure Firewall, WAF, Load Balancer, and related components
• Supporting the design, deployment, and operation of services obtained from different cloud service providers
• Designing network and cloud security controls in compliance with regulatory and audit requirements, including PCI-DSS and ISO 27001
• Automating infrastructure changes by integrating them into IaC and CI/CD pipelines
• Performing and regularly monitoring security hardening on Azure resources (e.g. NSG rules, Private Endpoints, storage access restrictions, Secure Score and Defender improvements)
• Monitoring, troubleshooting, and continuously improving infrastructure and platform services
• Managing change processes, coordinating with business units, and maintaining proper documentation