Azure Cloud Security Engineer

apeirum partners with European companies to place senior IT talent. For one of our client partners in Barcelona we're hiring an Azure Cloud Security Engineer to build and maintain their Azure cloud security — Entra ID, Conditional Access, Defender for Cloud and the Azure security landing zone. You'll work in a small security team and help the business adopt the cloud securely. Barcelona-based, permanent, with occasional travel to Switzerland (5–10%).

Tasks

• Configure, maintain and develop the Azure security landing zone and security stack.
• Manage Entra ID, Conditional Access and PIM.
• Support application owners in secure cloud onboarding, architecture and development.
• Monitor and resolve cloud security findings with business owners.
• Close gaps and process mismatches against cloud security governance.
• Provide deputy support to the cloud-security team (incl. Kubernetes-related security).

Requirements

• Azure Conditional Access and Entra ID security (and PIM).
• Microsoft Defender for Cloud configuration and assessment.
• Enterprise Application / App Registration configuration and review.
• Azure Policy settings and landing-zone experience.
• 2nd/3rd-level Azure skills to help business applications adopt the cloud.
• Kubernetes skills (deputy function for the cloud-security team).
• Good communication within IT and with business colleagues.
• Able to prioritise tasks, especially in a security context.
• Comfortable collaborating in a security team of 4 and with external suppliers.
• Degree in cloud security engineering or a related field, plus 2–3 years' experience.
• Good English (German a plus).
• Based in Spain (Barcelona).
• Nice to have: AZ-500, CCSP or a similar certification; general security knowledge.

Benefits

• Own the cloud-security landing zone in a modern Azure environment.
• A small, collaborative security team.
• A dynamic and friendly workplace in our Barcelona tech hub, combining startup energy with the stability of a Swiss industrial leader.
• International collaboration with global teams, especially in Switzerland, and external integration partners.
• Opportunities for continuous learning and growth through the internal academy and professional development programs.
• A permanent contract, competitive compensation, and flexible working hours supporting work–life balance.

Interested? Apply with your CV. We review every application personally and we'll get back to you.