Senior Cloud Security Engineer

Overview

We are looking for an Senior Cloud and Infrastructure Security Engineer.

The role maps the operational attack surface while the other seniors assess the applications. It provides a clear view of the cloud, edge, network, and VM estate, with identified gaps ranked for remediation.

About Nortal

We’re Nortal. We think big and create cutting-edge digital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwide impacted by our work, we believe we’ve got the numbers to back up that statement.

Our global teams have played a significant role in many Fortune 500 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.

Responsibilities

• Maps Azure (AKS with Istio, APIM, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, Key Vault) and the AWS estate behind one product line (ECS, EC2, Lambda, API Gateway, VPC)
• Reviews the edge across Cloudflare, Front Door, and Application Gateway, including WAF rules, TLS, and security headers
• Assesses the VM estate, including more than 500 SQL Server agency databases and a legacy product running on static VMs without infrastructure-as-code
• Reviews infrastructure-as-code and configuration management using Terraform and OpenTofu, Ansible, and Chef
• Defines the hardening baselines and prioritizes the work for the cloud and infrastructure engineers in phase 2

Qualifications

• Around 6 years of cloud or infrastructure engineering experience, with a strong security track record
• Deep Azure security expertise and working knowledge of AWS
• Kubernetes security
• Terraform or OpenTofu
• Hands-on experience using AI assistants to review infrastructure code and configuration

Helpful:

• Service mesh (Istio) security
• Ability to read Ansible and Chef
• AZ-500, AWS Security Specialty, or CCSP
• Cloud security posture tooling, such as Defender for Cloud, Wiz, or similar
• Experience bringing an estate with no infrastructure-as-code under control