- Location
- , PL
- Department
- Engineering
- Experience
- 25+ years
- Closing date
- Today
- Source
- iCIMS
Description
Overview
We are looking for an Senior Cloud and Infrastructure Security Engineer.
The role maps the operational attack surface while the other seniors assess the applications. It provides a clear view of the cloud, edge, network, and VM estate, with identified gaps ranked for remediation.
About Nortal
We’re Nortal. We think big and create cutting-edge digital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwide impacted by our work, we believe we’ve got the numbers to back up that statement.
Our global teams have played a significant role in many Fortune 500 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.
Responsibilities
- Maps Azure (AKS with Istio, APIM, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, Key Vault) and the AWS estate behind one product line (ECS, EC2, Lambda, API Gateway, VPC)
- Reviews the edge across Cloudflare, Front Door, and Application Gateway, including WAF rules, TLS, and security headers
- Assesses the VM estate, including more than 500 SQL Server agency databases and a legacy product running on static VMs without infrastructure-as-code
- Reviews infrastructure-as-code and configuration management using Terraform and OpenTofu, Ansible, and Chef
- Defines the hardening baselines and prioritizes the work for the cloud and infrastructure engineers in phase 2
Qualifications
- Around 6 years of cloud or infrastructure engineering experience, with a strong security track record
- Deep Azure security expertise and working knowledge of AWS
- Kubernetes security
- Terraform or OpenTofu
- Hands-on experience using AI assistants to review infrastructure code and configuration
Helpful:
- Service mesh (Istio) security
- Ability to read Ansible and Chef
- AZ-500, AWS Security Specialty, or CCSP
- Cloud security posture tooling, such as Defender for Cloud, Wiz, or similar
- Experience bringing an estate with no infrastructure-as-code under control