Cloud Security Architect

Ework Group is a talent solutions provider founded in 2000 and listed on Nasdaq Stockholm. It supports clients in private and public sectors and independent professionals, focusing on IT/OT, R&D, Engineering, and Business Development. The role is for a client in the healthcare sector.

• Strong hands-on experience with Microsoft Azure cloud architecture.
• Excellent English speaking skills.
• Strong cloud security expertise, including identity, networking, encryption, secrets management, logging, monitoring, and secure access patterns.
• Experience designing secure infrastructure for AI applications, AI agents, APIs, data-consuming applications, or internal developer platforms.
• Experience with sandboxed code execution, Python runtime environments, containerized workloads, or isolated compute patterns.
• Familiarity with Databricks as a data source for applications.
• Strong knowledge of network segregation, private endpoints, firewalls, virtual networks, controlled egress, and runtime isolation.
• Strong experience with Terraform for infrastructure provisioning and cloud architecture enablement.
• Strong experience with GitHub Enterprise, GitHub Actions, repository governance, branch protection, pull requests, and secure CI/CD patterns.
• Experience with Azure DevOps, ideally including migration from Azure DevOps to GitHub.
• Experience with secrets management, key vaults, managed identities, service principals, RBAC, and Microsoft Entra ID.
• Understanding of secure software delivery, release controls, traceability, and audit-ready engineering practices.
• Ability to work hands-on with engineers while also setting architecture direction and technical standards.

Nice to have:

• Experience with Azure AI, Azure OpenAI, or GenAI application patterns.
• Experience with containers and orchestration (Kubernetes, Azure Container Apps, Functions).
• Knowledge of GitHub Advanced Security (code scanning, secret scanning, dependency scanning).
• Experience in regulated environments (healthcare, pharma, life sciences).
• Understanding of GxP, CSV, CSA, or validation processes.
• Relevant certifications (e.g. Azure Solutions Architect, Azure Security Engineer, DevOps, Terraform).

• Design secure Azure cloud architectures for AI applications, data-driven applications, and internal digital products.
• Define architecture patterns for AI applications that consume data from Databricks and other enterprise data platforms.
• Establish secure patterns for AI agents, sandboxed Python/code execution, runtime isolation, network segregation, and controlled access to data and services.
• Design and implement standards for secrets management, identity, access control, encryption, logging, monitoring, and secure connectivity.
• Use Terraform to define, review, and enable repeatable cloud infrastructure patterns.
• Help drive the migration from Azure DevOps to GitHub Enterprise.
• Establish new GitHub-based CI/CD patterns, including repository standards, branching, pull requests, code reviews, automated testing, approvals, deployment gates, and release evidence.
• Define technical standards for secure software delivery, release traceability, and audit-ready engineering practices.
• Partner with engineering teams to implement reference architectures, reusable templates, pipelines, and secure cloud patterns.
• Review solution designs, identify security risks, and guide teams toward practical, compliant, and maintainable implementations.
• Collaborate with cloud, security, data, AI, quality, compliance, and product teams.
• Mentor engineers and improve engineering practices across cloud, security, DevOps, and AI infrastructure.

Consultant must be located in Poland. Recruitment process and role require excellent English skills. Solutions must be designed with future regulatory readiness in mind. Only candidates located in Poland are considered for this role.