Ekspert ds. bezpieczeństwa architektury cloud (k/m)

• Practical experience with designing, deploying, and maintaining Microsoft Azure and hybrid environments.
• Knowledge of architectural patterns for cloud services.
• Understanding of high availability, scalability, performance, and cloud resiliency principles.
• Experience creating and maintaining architectural documentation and technical standards.
• Knowledge of key Azure services: subscriptions, management groups, networking, storage, compute, Azure Monitor, Log Analytics, Key Vault, Azure Policy, Azure Resource Manager.
• Practical experience securing Azure and Microsoft 365.
• Knowledge of Microsoft IAM: Microsoft Entra ID, RBAC, MFA, Conditional Access, PIM, and least privilege principles.
• Experience reviewing cloud configuration, architecture, and security.
• Ability to provide services from Poland and partially from Warsaw office.

Nice to have:

• Experience with Infrastructure as Code: Terraform, Bicep, or ARM Templates.
• Knowledge of Azure DevOps, GitHub Actions, or other CI/CD tools.
• Experience with Microsoft Defender for Cloud, Defender XDR, Sentinel, and CSPM/CNAPP.
• Knowledge of CASB, SSE/SASE, Azure Landing Zones, and enterprise-scale governance.
• Experience with multi-cloud environments: AWS, GCP.
• Knowledge of containers, Kubernetes/AKS, and container workload security.
• Practical knowledge of ISO 27001, NIS2, DORA, RODO, or regulated sector requirements.
• Experience building Cloud Governance standards: tagging, budgets, limits, subscription and cost management.
• Certifications: AZ-500, SC-100, SC-300, AZ-104, CCSP, CISSP, CISM, or equivalent.

• Design, implementation, and maintenance of Microsoft Azure and hybrid cloud environments.
• Defining architectural patterns for cloud services.
• Designing for high availability, scalability, performance, and resilience of cloud services.
• Creating and maintaining architectural documentation and technical standards.
• Reviewing configurations, architecture, and security of cloud environments.
• Implementing cloud security for Azure and Microsoft 365.
• Managing IAM in Microsoft environments including Microsoft Entra ID, RBAC, MFA, Conditional Access, and PIM.
• Providing services partially from the office in Warsaw and from Poland.

• Services must be provided from Poland.
• Services are to be provided partially from the office in Warsaw.