Cloud Security Engineer

As one of the Best Big Companies to Work For, we have a rich history of loving our customers and looking after our teams.

We understand that success is achieved through our people, and we are searching for a skilled and experienced Cloud Security Engineer to join our Cyber Security team.

The successful candidate will report to the Cyber Security Architect and will be primarily responsible for ensuring the security of our Microsoft Azure environment. This includes designing, implementing, and maintaining security controls to protect cloud-based systems and data.

This role will involve working closely with infrastructure and development teams to ensure secure configurations and compliance with organisational and regulatory requirements.

This role is based in our Deeside head office, with a minimum of 2 days per week spent working from here.

Specific skills and capabilities we are looking for:

Essential

· Strong experience in securing Microsoft Azure environments.

· Knowledge of Azure security services such as Defender for Cloud, Key Vault, and Azure Policy.

· Ability to design and implement secure configurations for cloud resources.

· Understanding of identity and access management in cloud environments (e.g. Entra).

· Experience in designing and implementing secure network architectures in Azure, including Virtual Networks, subnets, and Network Security Groups (NSGs).

· Knowledge of Azure Firewall and Web Application Firewall (WAF) for perimeter security.

· Excellent documentation and communication skills.

Desirable

· Experience with AWS security best practices and services.

· Familiarity with cloud compliance frameworks (e.g., CIS Benchmarks, NIST, MCSB).

· Knowledge of Infrastructure as Code (IaC) security considerations (e.g. Terraform).

· Experience with VPN and ExpressRoute configurations for secure hybrid connectivity.

· Understanding of Zero Trust principles and network segmentation in cloud environments.

· Familiarity with Azure Private Endpoints and Service Endpoints to secure service access.

· Experience with monitoring and incident response in cloud environments.

· Relevant certifications such as Microsoft Certified: Azure Security Engineer Associate

What to expect from us:

• 15% discount in Iceland stores
• 30% discount at Club Individual Restaurants
• 33 days holiday (including bank holidays)
• Free onsite parking
• Onsite electric car charging ports
• Subsidised staff restaurant and Costa Coffee
• Christmas vouchers
• Refer a Friend Scheme
• Christmas Savings scheme
• Discounted dry cleaning
• Long service awards