Cloud Security Architect

The role is for a Cloud Security Architect (Senior) supporting secure architecture development for cloud and hybrid environments based on Microsoft Azure. The project focuses on threat analysis, security recommendations for Azure Landing Zone and multi-cloud security stack, risk evaluation of integrated PaaS, SaaS, IaaS, IDaaS with on-premise environments, and secure architecture recommendations.

• Minimum 5+ years of IT security experience, with practical expertise in Microsoft Azure cloud security
• Strong knowledge of cloud security architecture, configuration, and hardening
• Experience designing and implementing secure architecture patterns and security standards for cloud and hybrid environments (Azure Landing Zone, multi-cloud security stack)
• Ability to identify, assess, and analyze risks and security gaps in cloud projects, including integration of PaaS, SaaS (third-party), IaaS, and IDaaS with on-premise
• Familiarity with security standards and frameworks like CIS Benchmarks, NIST, ISO 27001/27017/27018, Cloud Security Alliance CCM
• Experience auditing compliance of on-premise/cloud solutions and preparing recommendations aligned with best market practices and regulations
• Practical knowledge of Microsoft cloud security mechanisms: Identity (Entra ID), Governance (Azure Policy, Blueprints), Infrastructure Security, and Microsoft Defender family (Defender for Cloud, Defender for Identity, Defender for Endpoint etc.)
• Experience working on business-technology projects involving on-premise and cloud service integration
• Polish language proficiency at C1/C2 level
• English language proficiency minimum B2 level

• Support development of secure cloud and hybrid architecture patterns
• Define security standards for cloud and hybrid environments
• Perform threat analysis and prepare security recommendations for Azure Landing Zone and multi-cloud security stack
• Assess risks and security gaps in projects integrating PaaS, SaaS (including third-party), IaaS, and IDaaS with on-premise environments
• Conduct compliance audits and prepare recommendations aligned with market practices and regulations
• Collaborate on implementation of cloud security mechanisms in Identity, Governance, and Infrastructure areas using Microsoft Defender solutions

During the recruitment process, candidate identity verification will be required at later stages. The first workday will be onsite at one of Euvic's offices for onboarding and equipment reception.