apeirum

Azure Cloud Security Engineer

apeirum Barcelona, Catalonia, Spain

Software Development · 2-10 employees

5 h ago
security Mid (2-5 yrs) Full-time Spain
Log in to apply, save this posting, or score it against your profile with AI.

About the role

You will configure, maintain, and develop the Azure security landing zone and security stack while managing Entra ID and Conditional Access. Additionally, you will support application owners in secure cloud onboarding and monitor cloud security findings.

What they look for

Azure Entra ID Conditional Access Microsoft Defender for Cloud Azure Security Landing Zone PIM Kubernetes Azure Policy Cloud Security Communication Task Prioritization Architecture Security Governance

Requirements

The role requires 2–3 years of experience in cloud security engineering and a degree in a related field. Candidates must have strong skills in Azure security, including Conditional Access, Entra ID, and Microsoft Defender for Cloud.

Benefits

Learning and development opportunities Competitive compensation Flexible working hours Club Natació de Barcelona membership Cobee program

Full description

We are having a huge opportunity to work with our client maxon. maxon is a global provider of world-class precision drive systems. Our drives are perfectly suited for wherever extreme precision and the highest quality standards are necessary - on Earth, and on Mars.

For creative minds and passionate doers, we offer a global yet trusted environment. Those who are prepared to question endless possibilities and challenge themselves will rise to great heights with us.

As their new Azure Cloud Security Engineer you will build and maintain their Azure cloud security — Entra ID, Conditional Access, Defender for Cloud and the Azure security landing zone. You'll work in a small security team and help the business adopt the cloud securely. Barcelona-based (3 days office work, 2 days home office), permanent, with occasional travel to Switzerland (5–10%).

Tasks

  • Configure, maintain and develop the Azure security landing zone and security stack.
  • Manage Entra ID, Conditional Access and PIM.
  • Support application owners in secure cloud onboarding, architecture and development.
  • Monitor and resolve cloud security findings with business owners.
  • Close gaps and process mismatches against cloud security governance.
  • Provide deputy support to the cloud-security team (incl. Kubernetes-related security).

Requirements

  • Azure Conditional Access and Entra ID security (and PIM).
  • Microsoft Defender for Cloud configuration and assessment.
  • Enterprise Application / App Registration configuration and review.
  • Azure Policy settings and landing-zone experience.
  • 2nd/3rd-level Azure skills to help business applications adopt the cloud.
  • Kubernetes skills (deputy function for the cloud-security team).
  • Good communication within IT and with business colleagues.
  • Able to prioritise tasks, especially in a security context.
  • Comfortable collaborating in a security team of 4 and with external suppliers.
  • Degree in cloud security engineering or a related field, plus 2–3 years' experience.
  • Good English (German a plus).
  • Based in Spain (Barcelona).
  • Nice to have: AZ-500, CCSP or a similar certification; general security knowledge.

Benefits

  • Own the cloud-security landing zone in a modern Azure environment.
  • A small, collaborative security team.
  • A collaborative and international environment, working with teams in Switzerland and worldwide.
  • A dynamic workplace in our Barcelona tech hub, combining startup energy with Swiss stability.
  • Learning and development opportunities through the maxon academy.
  • A permanent contract, competitive compensation, and flexible working hours.
  • Additional benefits such as Club Natació de Barcelona membership and Cobee program.

Interested? Apply with your CV. We review every application personally and we'll get back to you.

Similar roles