Security Engineer (IAM & Cloud Security)

Jesteśmy liderem rekrutacji specjalistów i menedżerów oraz doradztwa w obszarze HR. Marka obecna jest w 35 krajach, w Polsce działa od 1996 roku. Przez ten czas zbudowaliśmy wiele karier kandydatów, dzięki elastycznemu i kompleksowemu podejściu do wszystkich rekrutacji. Antal tworzy ponad 130 profesjonalnych konsultantów ds. rekrutacji, którzy są oni nie tylko skutecznymi rekruterami, ale także wykwalifikowanymi doradcami, specjalizującymi się zarówno w zakresie wybranego sektora, jak i stanowiska.

• Strong experience in Information Security Engineering
• Identity and Access Management (IAM)
• Zero Trust Architecture
• Authentication & Authorization
• Workload and Machine Identity Security
• PKI and Certificate Management
• Secrets Management
• Cryptography
• Cloud Security (GCP)
• Kubernetes Security
• Service Mesh Security
• API Security
• Policy-as-Code (OPA)
• DevSecOps
• Secure Software Development Lifecycle (SSDLC)
• Threat Modelling
• Vulnerability Management
• Security Monitoring and SIEM
• Security Compliance and Governance
• Incident Response

• Design and implement security controls across modern IAM platforms.
• Embed Secure by Design principles throughout solution delivery.
• Implement and maintain Zero Trust security controls.
• Configure authentication and authorization mechanisms.
• Secure service-to-service communication using mTLS.
• Implement security controls for workload, human, and machine identities.
• Develop Policy-as-Code solutions using OPA and related technologies.
• Integrate secrets management, PKI, and certificate lifecycle services.
• Support cryptographic key management and certificate rotation processes.
• Conduct security reviews, threat modeling, and risk assessments.
• Identify and remediate security vulnerabilities.
• Support vulnerability management and security patching initiatives.
• Define security standards, baselines, and hardening guides.
• Implement cloud security controls within GCP and Kubernetes environments.
• Configure monitoring, logging, alerting, and audit capabilities.
• Support identity governance and privileged access management.
• Participate in penetration testing and remediation activities.
• Contribute to DevSecOps practices and automated security testing.
• Collaborate with security operations and incident response teams.
• Produce security documentation and operational procedures.