Cloud Security Engineer

Our client is an innovative energy data acquisition and IoT technology company. They design and manufacture advanced energy submeters and controllers that connect seamlessly to the cloud, enabling energy efficiency, predictive maintenance, demand-response management, and distributed energy resource planning.

Operating across low-voltage networks, EV integration, and enterprise energy intelligence, they are reshaping the traditionally closed energy monitoring market through open-interface solutions.

This is an exciting opportunity to join a fast-evolving engineering environment that is transforming global energy sustainability through edge intelligence and cloud innovation.

The Role

We are looking for a Cloud Security Engineer to join the engineering team in either Athens or Patras. In this role, you will hold complete ownership of the Microsoft Azure security posture and establishing robust security standards across the ecosystem.

You will lead the implementation, configuration, governance, and monitoring of the cloud infrastructure supporting their end-to-end IoT platform. The position uniquely blends cloud administration, infrastructure as code automation, identity management, and developer enablement.

Working closely with software developers and cross-functional teams, you will translate security requirements into practical engineering guidelines and resilient deployment patterns.

Key Responsibilities

• Implement, configure, operate, and monitor Azure resources across compute, storage, networking, containers, and serverless architectures
• Enforce Zero Trust models and cloud-security baselines, ensuring least-privilege access and configuration governance
• Lead cloud infrastructure provisioning via Infrastructure as Code (IaC) exclusively using Terraform or Bicep
• Administer Microsoft Entra ID, including enterprise applications, RBAC, Conditional Access, PIM, and MFA
• Guide and support developers in implementing OpenID Connect, OAuth 2.0, SSO, JWT validation, and secure API patterns
• Manage and fine-tune Microsoft Defender for Cloud, Microsoft Sentinel, Log Analytics, WAF, and automated security alerting
• Design and secure Azure network topologies handling high traffic volumes, including VNets, private endpoints, NSGs, and firewalls
• Automate cloud operations, policy governance, and administrative tasks using Python scripting and Azure CLI
• Ensure platform alignment with recognized compliance frameworks, particularly ISO 27001 standards

What You'll Bring

• 4+ years of hands-on experience administering and securing production environments on Microsoft Azure
• Proven track record with full ownership of cloud security posture and IAM architecture
• Strong hands-on experience with Infrastructure as Code (IaC) exclusively using Terraform or Bicep
• In-depth expertise in Microsoft Entra ID, SSO, OpenID Connect, OAuth 2.0, and token lifecycle management
• Solid experience with Microsoft Defender for Cloud, Sentinel, WAF, Log Analytics, and network segmentation
• Working knowledge of compliance standards, particularly ISO 27001
• Proficient scripting skills in Python and Azure CLI for automation and administration
• Experience managing high-traffic cloud infrastructure and network configurations
• Fluency in English and professional collaboration skills

Nice to Have

• Microsoft certifications such as AZ-500, SC-200, SC-300, or AZ-104
• Exposure to IoT architectures, telemetry ingestion, MQTT, or messaging brokers such as Azure IoT Hub, Kafka, or RabbitMQ
• Experience with secure CI/CD pipelines in Azure DevOps or GitHub Actions, including container and dependency vulnerability scanning

What's in It for You

€2,100 – €3,000 Gross / Month depending on experience, alongside a fully on-site working setup based in Marousi (Athens) or Patras, ticket restaurant vouchers to support daily expenses, and comprehensive private health insurance coverage.

This is an opportunity to take complete ownership of the Microsoft Azure security posture for an award-winning IoT energy platform without corporate bureaucracy, working directly alongside an experienced engineering team to build resilient, modern cloud infrastructure that drives global energy sustainability.

If the salary range does not completely match your current expectations, apply anyway and we will explore flexibility based on your background.