Senior Cloud Security Engineer

Tenarai is the employer offering this position. The job involves contributing to a strategic Policy-as-Code initiative focused on enterprise cloud security guardrails, compliance automation, and secure cloud deployment standards for large-scale cloud modernization.

• 8+ years of experience in Cloud Engineering, Cloud Security, DevSecOps, or Platform Engineering.
• Demonstrated experience designing and implementing Policy-as-Code solutions.
• Advanced knowledge of Terraform, Bicep, Infrastructure as Code (IaC), and Policy as Code (PaC).
• Strong experience with Microsoft Azure; multi-cloud (AWS and/or GCP) preferred.
• Hands-on with Azure Policy, Open Policy Agent (OPA), Compliance Automation, Security Guardrails.
• Experience integrating security controls into GitHub Enterprise, GitHub Actions, Azure DevOps, CI/CD pipelines.
• Strong scripting and automation skills in PowerShell, Python, Bash.
• Experience with security and compliance frameworks such as SOC 2, NIS2, CIS Benchmarks, NIST.

Nice to have:

• Experience building enterprise cloud landing zones and platform engineering.
• Experience creating reusable Terraform module libraries.
• Knowledge of cloud security posture management (CSPM) and continuous compliance monitoring.
• Familiarity with Zero Trust architecture and cloud security best practices.
• Experience supporting large-scale cloud transformation programs.

• Design, implement, and operationalize Policy-as-Code frameworks across enterprise cloud environments.
• Develop and maintain security guardrails using Open Policy Agent (OPA), Azure Policy, and Compliance-as-Code frameworks.
• Translate security requirements and regulatory controls into machine-readable policies.
• Integrate policy enforcement into CI/CD pipelines to validate infrastructure before deployment.
• Develop reusable Infrastructure-as-Code modules and deployment templates using Terraform, Bicep, ARM Templates.
• Establish automated compliance validation and continuous assurance.
• Collaborate with Cloud Engineering, Platform Engineering, DevOps, and Security teams to embed security controls.
• Develop automation and scripting solutions using PowerShell, Python, Bash.
• Contribute to enterprise cloud governance, platform standardization, and security architecture.
• Support migration and modernization of CI/CD processes across GitHub and Azure DevOps.
• Create technical documentation, standards, patterns, and implementation guidance.

Must possess a legal work permit in Poland.