Cloud & Infrastructure Security Engineer

Make an impact

• Design and implement secure architectures for Azure and other cloud environments,
• configure and manage cloud-native security tools (e.g., Microsoft Defender for Cloud, MS Sentinel, MS Defender for Server, Fortinet Cloud Firewalls, etc.),
• establish and maintain cloud security baselines, policies, and guardrails,
• conduct cloud security assessments and support remediation activities,
• define and maintain cloud network security policies (firewalls, NSGs, segmentation),
• secure and harden cloud and on-prem workloads: storage, compute, virtualization and cloud networking,
• implement Zero Trust principles across cloud and on-prem environments,
• perform vulnerability assessments and coordinate remediation with Infrastructure teams,
• manage access governance across cloud and infrastructure systems,
• integrate infrastructure logs into SIEM (e.g., MS Sentinel),
• create advanced detection rules for cloud and infrastructure threats,
• collaborate with SOC during investigations and improve detection capabilities,
• develop runbooks for cloud/infrastructure-related security incidents,
• automate security controls using scripts (PowerShell, Python) and Infrastructure as Code (Terraform, Ansible),
• integrate security into CI/CD pipelines and infrastructure deployment processes,
• build automation for monitoring, remediation, and compliance reporting,
• ensure compliance with frameworks (ISO 27001, NIST, GDPR),
• contribute to audits, risk assessments, and documentation,
• maintain security architecture diagrams, standards, and technical guidelines.

What you need to succeed

• Bachelor`s degree in Computer Science, Information Security, or equivalent experience,
• 3+ years of hands-on experience in IT security engineering or architecture,
• several years of professional experience in the position as a Cloud Engineer, IT System Administrator, DevOps Engineer, Infrastructure Architect or in a similar position,
• deep technical knowledge of:
• Microsoft Azure (preferred) or AWS/GCP and their security concepts/tools
• IAM (EntraID), Zero Trust, encryption, logging
• Windows/Linux hardening
• Network security (firewalls, segmentation)
• experience with:
• SIEM/SOAR tools (e.g., MS Sentinel)
• PowerShell / Python scripting
• Security automation (PowerShell, Terraform, Python, Logic Apps, Functions)
• Containers & Kubernetes security
• strong understanding of cloud attack vectors, incident response, and threat modeling,
• several years of experience in working with enterprise scale IT systems including network, firewall, databases, scripting and automatization,
• security & ITIL processes are part of your DNA,
• working in an international team gives you motivation,
• fluent in English,
• german knowledge is an advantage,
• additional skills and certifications are a clear plus (AZ-500, AZ-305, CCSP, CISSP, GCIH, GCSA),
• familiarity with MITRE ATT&CK (Cloud + Enterprise).