Cloud Security Engineer (Azure Key Vault)
Cyclad
In Cyclad we work with top international IT companies in order to boost their potential in delivering outstanding, cutting edge technologies that shape the world of the future. Currently, we are looking for an experienced
Cloud Security - Azure Key Vault Consultant to design and implement secure cloud solutions for protecting sensitive assets, including software licenses, activation keys, and confidential data within the Microsoft Azure ecosystem.
In this role, you will be responsible for delivering enterprise-grade security solutions based on Microsoft's security best practices, Zero Trust principles, and Identity & Access Management (IAM).
Project information:
Location: 100% remote
Type of employment: B2B contract
Remuneration:140 - 160 PLN net + VAT per hour on B2B
Project languages: Polish and
English
Key Responsibilities:
Design and implement a secure solution for storing software licenses, activation keys, and confidential data in Microsoft Azure.
Configure and manage Azure Key Vault and Azure Managed HSM.
Implement security controls aligned with the Zero Trust architecture.
Integrate security services with Microsoft Entra ID, Multi-Factor Authentication (MFA), Conditional Access, and Privileged Identity Management (PIM).
Configure Role-Based Access Control (RBAC) and Just-in-Time (JIT) access models.
Implement monitoring, auditing, and security event integration with Microsoft Sentinel.
Design protection mechanisms against unauthorized access, bulk key extraction, and system compromise.
Prepare technical documentation and conduct knowledge transfer sessions for the client's technical team.
Requirements:
At least 3 years of hands-on experience delivering Microsoft Azure projects.
Strong practical experience with Azure Key Vault, Azure Managed HSM, and Microsoft Entra ID.
Proven expertise in Cloud Security and Identity & Access Management (IAM).
Solid knowledge of RBAC, Conditional Access, MFA, and Privileged Identity Management (PIM).
Experience designing and implementing solutions based on Zero Trust principles.
Hands-on experience with Microsoft Sentinel, Azure Monitor, and Log Analytics.
Experience with Infrastructure as Code (IaC) tools such as Terraform, Bicep, or equivalent.
Ability to create high-quality technical documentation and deliver technical workshops or knowledge transfer sessions.
Nice to have:
Microsoft certifications such as AZ-500, SC-300, or SC-100.
Experience with projects involving data protection, cryptography, or Hardware Security Modules (HSM).
Knowledge of Microsoft Defender for Cloud.
We offer:
Private medical care with dental care (covering 70% of costs). Family package option possible
Multisport card (also for an accompanying person)
Life insurance
Work with talented engineers on large-scale, technically challenging projects