Cloud Security Engineer

Overview
We are looking for an Senior Cloud and Infrastructure Security Engineer.
The role maps the operational attack surface while the other seniors assess the applications. It provides a clear view of the cloud, edge, network, and VM estate, with identified gaps ranked for remediation.
About Nortal
W e’re Nortal. We think big and create cutting-edge digital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwide impacted by our work, we believe we’ve got the numbers to back up that statement.
Our global teams have played a significant role in many Fortune 5 00 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.
Responsibilities
Maps Azure (AKS with Istio, APIM, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, Key Vault) and the AWS estate behind one product line (ECS, EC2, Lambda, API Gateway, VPC)
Reviews the edge across Cloudflare, Front Door, and Application Gateway, including WAF rules, TLS, and security headers
Assesses the VM estate, including more than 500 SQL Server agency databases and a legacy product running on static VMs without infrastructure-as-code
Reviews infrastructure-as-code and configuration management using Terraform and OpenTofu, Ansible, and Chef
Defines the hardening baselines and prioritizes the work for the cloud and infrastructure engineers in phase 2
Qualifications
Around 6 years of cloud or infrastructure engineering experience, with a strong security track record
Deep Azure security expertise and working knowledge of AWS
Kubernetes security
Terraform or OpenTofu
Hands-on experience using AI assistants to review infrastructure code and configuration
Helpful
Service mesh (Istio) security
Ability to read Ansible and Chef
AZ-500, AWS Security Specialty, or CCSP
Cloud security posture tooling, such as Defender for Cloud, Wiz, or similar
Experience bringing an estate with no infrastructure-as-code under control

Work arrangement
Yes