Cloud Security & Identity Engineer

At Logicalis Spain we are looking for a Cloud Security & Identity Engineer to join one of our clients.

The person will be responsible for designing, implementing and monitoring security controls in hybrid cloud environments (Azure and GCP), with a focus on protecting workloads, identities and networks. They will act as the technical reference for CSPM/CNAPP tools and lead hardening, detection and response initiatives to reduce the organisation's attack surface.

Experience:

• At least 4 years of experience in technical cloud security roles.

• Proven experience in projects with Azure and/or GCP in production environments.

• Experience with CSPM/CNAPP tools in enterprise environments.

• Track record in identity management and IAM controls in multi-cloud environments.

Main Responsibilities:

Cloud Security (Azure & GCP)

• Assess and strengthen the security posture of Azure subscriptions and GCP projects.

• Manage security policies, RBAC, Conditional Access and Defender for Cloud in Azure.

• Implement and maintain Security Command Center and security controls in GCP.

• Review IaaS, PaaS and container configurations to detect deviations and misconfigurations.

CSPM & CNAPP

• Administer and optimise CSPM tools (e.g. Prisma Cloud, Wiz, Defender CSPM) for continuous visibility.

• Manage CNAPP platforms integrating protection of cloud-native workloads (CWPP, KSPM, DSPM).

• Define compliance benchmarks (CIS, NIST, ISO 27001) and automate remediation.

• Coordinate with DevSecOps teams to integrate security into CI/CD pipelines.

Identity and Access (IAM)

• Design and manage Zero Trust identity architectures in hybrid and multi-cloud environments.

• Administer Azure AD / Entra ID: conditional access policies, PIM, MFA and SSO.

• Review and audit excessive permissions and privileged accounts in the cloud (CIEM).

• Implement controls to prevent privilege escalation and lateral movement.

Network Security

• Design network segmentation in cloud environments: VNets, VPCs, NSGs, firewall rules and Private Endpoints.

• Review hybrid connectivity architectures (ExpressRoute, VPN, Interconnect).

• Analyse traffic flows, firewall rules and WAF/DDoS configuration.

• Support network forensic analysis and incident investigation.

Consulting and Governance

• Carry out technical cloud security assessments and prepare improvement roadmaps.

• Document reference architectures, security policies and procedures.

• Support internal and external clients in secure cloud transformation projects.

• Take part in incident response and red team / blue team exercises.

What we offer at Logicalis Spain

Logicalis Spain is an international group with more than 20 years of experience in the IT sector, involved in large-scale projects and services in Data Centres, Cybersecurity and Analytics.

• Stable position and permanent contract.

• Hybrid working model.

• Early finish every Friday and in summer.

• Day off on your birthday plus one personal day.

• Possibility of flexible remuneration plans (restaurant card, transport card).

• We care about your wellbeing; you will have access to Private Medical Insurance and Wellhub (Gympass).

• Significant discounts on various services and training as a Logicalis employee (retail, electronics, travel..)

• Training and certifications tailored to your role.

• Professional development with leading projects and technologies current in the market.