Cloud and infrastructure security engineer

Are you an experienced cloud or infrastructure engineer with a strong security background and a sharp eye for configuration gaps? We’re looking for a Cloud & Infrastructure Security Engineer to join an international project for a US-based SaaS provider supporting hundreds of public-sector agencies across North America.

• Map the infrastructure attack surface and identify security vulnerabilities and configuration gaps.
• Assess the Azure environment, including AKS with Istio, API Management, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, and Key Vault.
• Review AWS infrastructure (ECS, EC2, Lambda, API Gateway, VPC).
• Evaluate edge security across Cloudflare, Azure Front Door, and Application Gateway, covering WAF, TLS, and security headers.
• Assess the VM estate, including 500+ SQL Server databases and legacy applications without infrastructure-as-code.
• Define security hardening baselines and build a prioritized remediation roadmap.

• 8+ years of experience in Cloud or Infrastructure Engineering with a strong security background.
• Deep expertise in Azure security and practical knowledge of AWS.
• Hands-on experience with Kubernetes security.
• Proficiency in Terraform or OpenTofu.
• Practical experience using AI assistants to review infrastructure code and configurations.
• The ability to translate security findings into actionable remediation priorities.
• Будет плюсом: Istio service mesh security; Ansible; Chef; CSPM tools (Microsoft Defender for Cloud, Wiz); legacy infrastructure modernization; AZ-500; AWS Certified Security – Specialty; CCSP

• 12 months
• PLN 22,000–26,000 net + VAT per month (B2B contract)