{"id":4175692,"url":"https://alion.io/job/site-azqore-senior-private-cloud-security-engineer","title":"Senior Private Cloud Security Engineer","company":{"id":695092,"name":"Site Azqore","domain":"azqore.com","url":"https://alion.io/company/azqore","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"OpenShift","optional":false},{"name":"OpenStack","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"SBOM","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"VMWare","optional":false}],"status":"live","first_seen_at":"2026-11-12T06:15:44Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T15:59:33Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Azqore, a next-generation provider of Information Systems and banking operations services, is a subsidiary of Indosuez Wealth Management, the wealth management arm of the Crédit Agricole Group. As a global company, Azqore is committed to providing wealth managers with integrated, turnkey digital solutions.\nWith its headquarters in Switzerland and its Asia hub in Singapore, Azqore currently serves around thirty clients through its proprietary S2i platform, supporting approximately CHF 200 billion in assets under management.\nAt the heart of our strategy, we are looking for a Senior Private Cloud Security Engineer in charge of the security engineering of Azqore private-cloud platforms and their workloads, with a primary focus on Virtuozzo Application Platform and Virtuozzo Hybrid Infrastructure. The engineer will establish secure platform patterns, hardening, segmentation, secrets management, observability and audit-ready evidence for regulated workloads..\nYour responsibilities\nPrivate-cloud security architecture - Design and maintain the security baseline for VAP/VHI, virtualization or OpenStack-like components. Translate threats and regulatory expectations into practical controls.\n\nEnvironment isolation - Define secure patterns for DEV, SIM, UAT, EXP and sandbox environments, including tenant separation, administrative boundaries and controlled connectivity.\n\nNetwork security - Specify and review segmentation, firewall rules, bastion and jump-host access, TLS, DNS and restricted-egress patterns. Apply least connectivity and produce traceable flow documentation.\n\nPlatform hardening - Establish CIS-aligned hardening, secure configuration, follow-up of patching, vulnerability management and configuration-drift controls and platform services.\n\nSecrets and service access - Participate in designing Vault namespaces, policies, authentication methods, rotation, TTL and revocation. Secure GitLab JWT and production AppRole patterns. Prevent clear-text secrets in Terraform/Ansible and deployment tooling.\n\nSecure automation - Review and harden centralized Ansible content and IaC. Define code-review, testing, promotion, inventory and credential-handling practices.\n\nRegistry and image security - Participate in governance of internal Docker and Nexus registries, approved base images, scanning, SBOM, provenance and promotion of trusted images into private-cloud environments.\n\nObservability and detection - Define security logging and telemetry with ELK/EFK, Open Telemetry and Splunk. Ensure key administrative and security events are detectable and retained.\n\nOperational readiness - Create runbooks, exception handling, incident support, evidence packs and knowledge transfer. Establish ownership with Infrastructure, Network, SOC, IAM, DevOps and application teams.\n\nYour core competencies\nBachelor Degree in Cybersecurity, Computer Science or equivalent\n\nMinimum 8 years delivery and hands-on security experience with:\nPrivate cloud, Kubernetes, OpenStack, OpenShift, VMware or an equivalent platform.\n\nLinux and container hardening, vulnerability management and secure administration.\n\nNetwork segmentation, firewalling, bastion patterns, TLS and DNS fundamentals.\n\nHashiCorp Vault or comparable enterprise secrets-management implementation.\n\nGitLab CI/CD and Ansible security, including secure credential patterns.\n\nContainer image, registry, SBOM and trusted-base-image governance.\n\nSecurity logging, SIEM integration and operational evidence.\n\nAbility to create a baseline and drive implementation across several infrastructure owners.\n\nProven achievements as a hands-on architect-builder who can turn an incomplete requirement into a clear security design, working implementation, evidence, documentation and an operational handover.\n\nKeen to roll up sleeve and do beyond advisory work but also involved in deployment and production support work.\n\nUnderstands availability, recoverability, change control, audit evidence, operational ownership and supportability.\n\nYou are autonomous, tenacious and rigorous. Boredom won't be part of your day, but you need to know how to organize yourself to manage the multiple issues underway.","description_format":"text","description_chars":4164,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-11-12T15:59:33Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:2","win:early"],"computed_at":"2026-11-12T18:22:37Z"},"pay":null,"html_url":"https://alion.io/job/site-azqore-senior-private-cloud-security-engineer","json_url":"https://alion.io/job/site-azqore-senior-private-cloud-security-engineer.json","meta":{"generated_at":"2026-11-12T18:22:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38617,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":695092},"rest":"https://alion.io/mcp/rest/get_company?id=695092"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsite-azqore-senior-private-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsite-azqore-senior-private-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsite-azqore-senior-private-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/site-azqore-senior-private-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsite-azqore-senior-private-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4175692}},{"tool":"search_jobs","arguments":{"company":"azqore.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4175692},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}