Cloud Security Engineer

We are looking for an Senior Cloud and Infrastructure Security Engineer.

The role maps the operational attack surface while the other seniors assess the applications. It provides a clear view of the cloud, edge, network, and VM estate, with identified gaps ranked for remediation.

We’re Nortal. We think big and create cutting-edge digital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwide impacted by our work, we believe we’ve got the numbers to back up that statement.

Our global teams have played a significant role in many Fortune 500 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.

• Maps Azure (AKS with Istio, APIM, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, Key Vault) and the AWS estate behind one product line (ECS, EC2, Lambda, API Gateway, VPC)
• Reviews the edge across Cloudflare, Front Door, and Application Gateway, including WAF rules, TLS, and security headers
• Assesses the VM estate, including more than 500 SQL Server agency databases and a legacy product running on static VMs without infrastructure-as-code
• Reviews infrastructure-as-code and configuration management using Terraform and OpenTofu, Ansible, and Chef
• Defines the hardening baselines and prioritizes the work for the cloud and infrastructure engineers in phase 2

• Around 6 years of cloud or infrastructure engineering experience, with a strong security track record
• Deep Azure security expertise and working knowledge of AWS
• Kubernetes security
• Terraform or OpenTofu
• Hands-on experience using AI assistants to review infrastructure code and configuration

Helpful:

• Service mesh (Istio) security
• Ability to read Ansible and Chef
• AZ-500, AWS Security Specialty, or CCSP
• Cloud security posture tooling, such as Defender for Cloud, Wiz, or similar
• Experience bringing an estate with no infrastructure-as-code under control