Cloud Security Architect

IT Factory is a dynamic company with experience in developing, implementing, and supporting IT solutions for a leading insurance and financial group in Poland.

• Practical experience in designing, implementing, and maintaining Microsoft Azure and hybrid environments
• Ability to define architectural patterns for cloud services
• Knowledge of designing high availability, scalability, performance, and resilience for cloud services
• Understanding of key Azure services: subscriptions, management groups, networking, storage, compute, Azure Monitor, Log Analytics, Key Vault, Azure Policy, Azure Resource Manager
• Practical experience in designing and implementing security for Azure and Microsoft 365
• Knowledge of IAM in Microsoft environments: Microsoft Entra ID, RBAC, MFA, Conditional Access, PIM
• Experience in configuration, architecture, and security reviews of cloud environments

Nice to have:

• Infrastructure as Code tools: Terraform, Bicep, ARM Templates
• Experience with Azure DevOps, GitHub Actions, or other CI/CD tools
• Knowledge of Microsoft Defender for Cloud, Defender XDR, Sentinel, CSPM/CNAPP
• Concepts like CASB, SSE/SASE, Azure Landing Zones, enterprise scale governance
• Multi-cloud experience: AWS, GCP
• Knowledge of Kubernetes/AKS and container workload security
• Familiarity with standards: ISO 27001, NIS2, DORA, RODO
• Certifications: AZ-500, SC-100, SC-300, AZ-104, CCSP, CISSP, CISM or equivalents

• Design, develop, and maintain cloud and hybrid environment architectures
• Define and implement target architectural patterns for cloud services
• Design and deploy security solutions for Microsoft Azure and Microsoft 365 environments
• Implement identity, access, logging, data protection, segmentation, and security monitoring controls
• Monitor configuration, vulnerabilities, risks, and deviations from security standards
• Participate in architecture reviews, technology audits, and coordinate post-audit activities

Please be informed that the data controller is IT Factory. You have the right to request access to your personal data, their rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability and to lodge a complaint to the supervisory authority. Personal data will be processed for the purpose of the recruitment process. Provision of data to the extent resulting from the Act of 26 June 1974 Labour Code is mandatory. In the remaining scope, providing data is voluntary. Refusal to provide mandatory data may result in the impossibility to carry out the recruitment process. The Administrator processes mandatory data on the basis of a legal obligation incumbent upon him/her, while with regard to additional data, the basis for processing is consent. Personal data will be processed until the recruitment procedure is completed and for the period of the possibility of asserting potential claims, and in the case of consent to participate in future recruitment procedures - until the withdrawal of such consent. Consent to the processing of personal data can be withdrawn at any time. The recipient of the data is the Just Join IT service and other entities to whom we have entrusted the processing of data in connection with recruitment.