Cloud Security Architect (AI Solutions)

H2B Group is a consulting company that helps clients automate business processes using AI and supports IT professionals developing careers in the B2B model. They offer projects in sectors such as fintech, medtech, edutech, and industrial automation, delivering quick and measurable results while providing career growth opportunities.

• Solid, practical hands-on experience with Microsoft Azure Cloud architecture.
• Proficient spoken English (C1 level).
• Deep knowledge of cloud security including identity, networking, encryption, secret management, logging, monitoring, and secure access patterns.
• Experience designing secure infrastructure for AI applications, AI agents, APIs, data processing apps, or internal developer platforms.
• Experience with isolated code execution (sandboxing), Python runtime environments, containerization, and isolated compute patterns.
• Knowledge of Databricks as a data source for applications.
• Expertise in network segmentation, private endpoints, firewalls, virtual networks, controlled egress, and execution environment isolation.
• Extensive experience with Terraform for infrastructure provisioning and cloud architecture deployment.
• Extensive experience with GitHub Enterprise, GitHub Actions, repository governance, branch protection, pull requests, and secure CI/CD patterns.
• Experience with Azure DevOps, preferably with migrations to GitHub.
• Experience managing secrets, key vaults, managed identities, service principals, RBAC, and Microsoft Entra ID.
• Understanding of secure software delivery, release control, traceability, and audit-ready engineering practices.
• Ability to work hands-on with engineers while setting architectural direction and technical standards.

• Design secure cloud architectures on Azure for AI applications, data processing apps, and internal digital products.
• Define architectural patterns for AI applications integrating data from Databricks and other corporate data platforms.
• Establish secure patterns for AI agents, safe execution of Python code in isolated environments (sandboxing), execution environment isolation, network segmentation, and controlled data/service access.
• Design and implement standards for secret management, identity, access control, encryption, logging, monitoring, and secure connectivity.
• Use Terraform to define, verify, and deploy repeatable cloud infrastructure patterns.
• Support and lead migration from Azure DevOps to GitHub Enterprise.
• Create new CI/CD patterns based on GitHub, including repository standards, branching strategies, pull requests, code reviews, automated tests, approvals, deployment gates, and release documentation.
• Define technical standards for secure software delivery, traceability, and engineering practices prepared for audits.
• Mentor engineers and improve engineering practices in cloud, security, DevOps, and AI infrastructure.

The position is fully remote but candidates must be located in Poland due to regulatory and client requirements. Recruitment language is English and the recruitment process consists of two online stages.