Senior Cloud and Infrastructure Security Engineer

Nortal; Stati Uniti; Remoto; USD 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

Nortal is seeking a Senior Cloud Security Engineer to assess and strengthen a multi-cloud infrastructure. You will identify security gaps across Azure/AWS, review IaC and edge configurations, and define hardening baselines. Collaboration with cloud and infrastructure teams is essential to implement remediation actions.

Bring hands-on Azure security expertise, Kubernetes experience, and familiarity with Terraform/OpenTofu. Certifications such as AZ-500 or CCSP are a plus.

Competenze

• Approximately 8 years of experience in cloud or infrastructure engineering, with a strong focus on security.
• Deep hands-on expertise in Microsoft Azure security and working knowledge of AWS.
• Practical experience securing Kubernetes environments.
• Experience with Terraform or OpenTofu.
• Hands-on experience using AI assistants to review infrastructure code and configuration for security issues.
• Ability to assess complex infrastructure environments, identify security weaknesses and recommend remediation actions.
• Knowledge of service mesh security, particularly Istio, would be an advantage.
• Ability to read and understand Ansible and Chef configurations would be an advantage.
• Relevant certifications, such as AZ-500, AWS Certified Security – Specialty or CCSP, would be an advantage.
• Experience with cloud security posture management tools, such as Microsoft Defender for Cloud, Wiz or equivalent solutions, would be an advantage.
• Experience securing and bringing legacy infrastructure environments without established Infrastructure as Code practices under structured management would be an advantage.

Mansioni

• Assess the security of Azure infrastructure, including AKS, Istio, API Management, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking and Key Vault, as well as selected AWS services, including ECS, EC2, Lambda, API Gateway and VPC.
• Review edge security configurations across Cloudflare, Azure Front Door and Application Gateway, focusing on WAF rules, TLS configuration and security headers.
• Evaluate the security posture of the virtual machine estate, including over 500 SQL Server agency databases and legacy applications hosted on static virtual machines.
• Review Infrastructure as Code and configuration management practices using Terraform, OpenTofu, Ansible and Chef.
• Identify security gaps, define infrastructure hardening baselines and prioritize remediation activities.
• Provide actionable recommendations and collaborate with cloud and infrastructure engineers to implement security improvements.
• Use AI-assisted tools to support the review of infrastructure code and configuration.

Conoscenze

Cloud security

Azure security

AWS

Kubernetes security

AI-assisted security

IaC (Terraform/OpenTofu)

Ansible

Chef

Security reviews

Networking security

Strumenti

Terraform

OpenTofu

Ansible

Chef

Cloudflare

Istio

Azure Front Door

Azure Firewall

Descrizione del lavoro

We are looking for an experienced Senior Cloud Security Engineer to assess and strengthen the security of a complex, multi-cloud infrastructure environment. In this role, you will focus on identifying security gaps across cloud platforms, network architecture, edge services, Kubernetes and virtual machine infrastructure. You will evaluate existing configurations, establish security hardening baselines and provide actionable recommendations to guide remediation efforts. Working closely with cloud and infrastructure engineering teams, you will help improve the security posture of the environment and establish a clear roadmap for infrastructure security improvements.

About Nortal:

We’reNortal. We think big and createcutting-edgedigital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwideimpactedby our work, we believewe’vegot the numbers to back up that statement.Our global teams have played a significant role in many Fortune 500 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.

Responsibilities:

• Assess the security of Azure infrastructure, including AKS, Istio, API Management, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking and Key Vault, as well as selected AWS services, including ECS, EC2, Lambda, API Gateway and VPC.
• Review edge security configurations across Cloudflare, Azure Front Door and Application Gateway, focusing on WAF rules, TLS configuration and security headers.
• Evaluate the security posture of the virtual machine estate, including over 500 SQL Server agency databases and legacy applications hosted on static virtual machines.
• Review Infrastructure as Code and configuration management practices using Terraform, OpenTofu, Ansible and Chef.
• Identify security gaps, define infrastructure hardening baselines and prioritize remediation activities.
• Provide actionable recommendations and collaborate with cloud and infrastructure engineers to implement security improvements.
• Use AI-assisted tools to support the review of infrastructure code and configuration.

Qualifications:

• Approximately 8 years of experience in cloud or infrastructure engineering, with a strong focus on security.
• Deep hands‑on expertise in Microsoft Azure security and working knowledge of AWS.
• Practical experience securing Kubernetes environments.
• Experience with Terraform or OpenTofu.
• Hands‑on experience using AI assistants to review infrastructure code and configuration for security issues.
• Ability to assess complex infrastructure environments, identify security weaknesses and recommend remediation actions.
• Knowledge of service mesh security, particularly Istio, would be an advantage.
• Ability to read and understand Ansible and Chef configurations would be an advantage.
• Relevant certifications, such as AZ-500, AWS Certified Security – Specialty or CCSP, would be an advantage.
• Experience with cloud security posture management tools, such as Microsoft Defender for Cloud, Wiz or equivalent solutions, would be an advantage.
• Experience securing and bringing legacy infrastructure environments without established Infrastructure as Code practices under structured management would be an advantage.