About the role

Build and maintain the Azure cloud security stack, including Entra ID, Conditional Access, and the security landing zone. Support application owners with secure cloud onboarding and resolve security findings to align with governance.

What they look for

Azure Cloud Security Entra ID Conditional Access Microsoft Defender for Cloud Azure Security Landing Zone PIM Azure Policy Kubernetes Security Cloud Architecture Cloud Governance App Registration Configuration English Communication

Requirements

Requires a degree in cloud security engineering or a related field with 2-3 years of experience. Proficiency in Azure security tools and Kubernetes skills are essential, along with strong communication skills in English.

Benefits

Ownership of cloud-security landing zone Collaborative security team Dynamic and friendly workplace International collaboration Internal academy and professional development programs Permanent contract Competitive compensation Flexible working hours

Full description

apeirum partners with European companies to place senior IT talent. For one of our client partners in Barcelona we're hiring an Azure Cloud Security Engineer to build and maintain their Azure cloud security — Entra ID, Conditional Access, Defender for Cloud and the Azure security landing zone. You'll work in a small security team and help the business adopt the cloud securely. Barcelona-based, permanent, with occasional travel to Switzerland (5–10%).

Tasks

Configure, maintain and develop the Azure security landing zone and security stack.

Manage Entra ID, Conditional Access and PIM.

Support application owners in secure cloud onboarding, architecture and development.

Monitor and resolve cloud security findings with business owners.

Close gaps and process mismatches against cloud security governance.

Provide deputy support to the cloud-security team (incl. Kubernetes-related security).

Requirements

Azure Conditional Access and Entra ID security (and PIM).

Microsoft Defender for Cloud configuration and assessment.

Enterprise Application / App Registration configuration and review.

Azure Policy settings and landing-zone experience.

2nd/3rd-level Azure skills to help business applications adopt the cloud.

Kubernetes skills (deputy function for the cloud-security team).

Good communication within IT and with business colleagues.

Able to prioritise tasks, especially in a security context.

Comfortable collaborating in a security team of 4 and with external suppliers.

Degree in cloud security engineering or a related field, plus 2–3 years' experience.

Good English (German a plus).

Based in Spain (Barcelona).

Nice to have: AZ-500, CCSP or a similar certification; general security knowledge.

Benefits

Own the cloud-security landing zone in a modern Azure environment.

A small, collaborative security team.

A dynamic and friendly workplace in our Barcelona tech hub, combining startup energy with the stability of a Swiss industrial leader.

International collaboration with global teams, especially in Switzerland, and external integration partners.

Opportunities for continuous learning and growth through the internal academy and professional development programs.

A permanent contract, competitive compensation, and flexible working hours supporting work–life balance.

Interested? Apply with your CV. We review every application personally and we'll get back to you.