Cloud Security Engineer (Azure Key Vault)

Project Information

• Remuneration: 140–160 PLN net + VAT per hour.
• Project languages: Polish and English.

Key Responsibilities

• Design and implement a secure solution for storing software licenses, activation keys, and confidential data in Microsoft Azure.
• Configure and manage Azure Key Vault and Azure Managed HSM.
• Implement security controls aligned with the Zero Trust architecture.
• Integrate security services with Microsoft Entra ID, Multi-Factor Authentication (MFA), Conditional Access, and Privileged Identity Management (PIM).
• Configure Role-Based Access Control (RBAC) and Just-in-Time (JIT) access models.
• Implement monitoring, auditing, and security event integration with Microsoft Sentinel.
• Design protection mechanisms against unauthorized access, bulk key extraction, and system compromise.
• Prepare technical documentation and conduct knowledge-transfer sessions for the client’s technical team.

Requirements

• At least 3 years of hands-on experience delivering Microsoft Azure projects.
• Strong practical experience with Azure Key Vault, Azure Managed HSM, and Microsoft Entra ID.
• Proven expertise in Cloud Security and Identity & Access Management (IAM).
• Solid knowledge of RBAC, Conditional Access, MFA, and Privileged Identity Management (PIM).
• Experience designing and implementing solutions based on Zero Trust principles.
• Hands-on experience with Microsoft Sentinel, Azure Monitor, and Log Analytics.
• Experience with Infrastructure as Code (IaC) tools such as Terraform, Bicep, or equivalent.
• Ability to create high-quality technical documentation and deliver technical workshops or knowledge-transfer sessions.

Nice to Have

• Microsoft certifications such as AZ-500, SC-300, or SC-100.
• Experience with projects involving data protection, cryptography, or Hardware Security Modules (HSM).
• Knowledge of Microsoft Defender for Cloud.

Benefits

• Private medical care with dental care, covering 70% of costs.
• Family package option.
• Multisport card, including for an accompanying person.
• Life insurance.
• Work with talented engineers on large-scale, technically challenging projects.