JobCubby JobCubby
Sign up
Nortal

Senior Cloud Security Engineer

Nortal Krakow, Lesser Poland Voivodeship, Poland

IT Services and IT Consulting · 1,001-5,000 employees

Oct 21
security Senior (5-10 yrs) Other Poland
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

Map and assess the cloud, edge, network, and virtual machine environments across Azure and AWS, identifying security gaps and prioritizing remediation. Review edge protections, infrastructure-as-code, configuration management, and legacy systems, then define hardening baselines for the engineering team.

What they look for

Azure Security AWS Security Kubernetes Security Terraform OpenTofu Infrastructure Security Cloud Security Istio Ansible Chef Infrastructure Hardening Infrastructure-as-Code Review AI-Assisted Code Review Web Application Firewall Configuration TLS Network Security

Requirements

The role requires around six years of cloud or infrastructure engineering experience with a strong security track record, deep Azure security expertise, working knowledge of AWS and Kubernetes security, and Terraform or OpenTofu experience. Hands-on use of AI assistants to review infrastructure code and configuration is required; experience with Istio, Ansible, Chef, cloud security certifications or posture tools, and unmanaged infrastructure estates is helpful.

Full description

Overview

We are looking for an Senior Cloud and Infrastructure Security Engineer.

The role maps the operational attack surface while the other seniors assess the applications. It provides a clear view of the cloud, edge, network, and VM estate, with identified gaps ranked for remediation.

About Nortal

We’re Nortal. We think big and create cutting-edge digital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwide impacted by our work, we believe we’ve got the numbers to back up that statement. 

Our global teams have played a significant role in many Fortune 500 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.

Responsibilities

  • Maps Azure (AKS with Istio, APIM, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, Key Vault) and the AWS estate behind one product line (ECS, EC2, Lambda, API Gateway, VPC)
  • Reviews the edge across Cloudflare, Front Door, and Application Gateway, including WAF rules, TLS, and security headers
  • Assesses the VM estate, including more than 500 SQL Server agency databases and a legacy product running on static VMs without infrastructure-as-code
  • Reviews infrastructure-as-code and configuration management using Terraform and OpenTofu, Ansible, and Chef
  • Defines the hardening baselines and prioritizes the work for the cloud and infrastructure engineers in phase 2

Qualifications

  • Around 6 years of cloud or infrastructure engineering experience, with a strong security track record
  • Deep Azure security expertise and working knowledge of AWS
  • Kubernetes security
  • Terraform or OpenTofu
  • Hands-on experience using AI assistants to review infrastructure code and configuration

Helpful:

  • Service mesh (Istio) security
  • Ability to read Ansible and Chef
  • AZ-500, AWS Security Specialty, or CCSP
  • Cloud security posture tooling, such as Defender for Cloud, Wiz, or similar
  • Experience bringing an estate with no infrastructure-as-code under control

In your resume please allow our company to use your personal data

Similar roles