Azure Cloud Security Engineer

apeirum partners with European companies to place senior IT talent. For one of our client partners in Barcelona we're hiring an Azure Cloud Security Engineer to build and maintain their Azure cloud security — Entra ID, Conditional Access, Defender for Cloud and the Azure security landing zone. You'll work in a small security team and help the business adopt the cloud securely. Barcelona-based, permanent, with occasional travel to Switzerland (5–10%).

• Configure, maintain and develop the Azure security landing zone and security stack.
• Manage Entra ID, Conditional Access and PIM.
• Support application owners in secure cloud onboarding, architecture and development.
• Monitor and resolve cloud security findings with business owners.
• Close gaps and process mismatches against cloud security governance.
• Provide deputy support to the cloud-security team (incl. Kubernetes-related security).

Must have:

• Azure Conditional Access + Entra ID security (and PIM).
• Defender for Cloud configuration and assessment.
• Enterprise Application / App Registration configuration and review.
• Azure Policy settings + landing-zone experience.
• 2nd/3rd-level Azure skills to help business applications adopt the cloud.
• Kubernetes skills (deputy function).
• Degree in cloud security engineering or related + 2–3 years' experience.
• Good English (German a plus).
• Based in Spain (Barcelona).

Nice to have:

• AZ-500, CCSP or similar certification; general security knowledge.

• Own the cloud-security landing zone in a modern Azure environment.
• A small, collaborative security team.
• Permanent, full-time, Barcelona-based.
• International environment.

Interested? Apply with your CV. We review every application personally and we'll get back to you.