Cloud Security and Infrastructure Tech Lead

Our requirements

• Proven experience in Azure cloud security and infrastructure architecture, including hands-on administration of Microsoft Defender for Cloud and Microsoft Sentinel.
• Experience managing vulnerability remediation programmes and coordinating with multiple teams and stakeholders.
• Proficiency with Azure Web Application Firewall (WAF) tuning and risk assessment of rule exemptions.
• Strong knowledge of identity and access management concepts including Azure RBAC, Entra ID (Azure AD), PIM, MFA and related integration patterns.
• Familiarity with containerisation and orchestration technologies (AKS, Kubernetes, Docker, Helm) and associated operational practices.
• Understanding of modern application architectures: .NET backend, React frontend, REST APIs, microservices and event-driven patterns.
• Experience with observability and CI/CD tools such as Dynatrace and Azure DevOps or equivalent.
• Working knowledge of OWASP Top 10 and vulnerability management best practices; experience with secrets management (Azure Key Vault) is desirable.
• Proven ability to present technical findings and risk-based recommendations to stakeholders and governance forums.

Your responsibilities

• Manage the end-to-end vulnerability management process across Azure cloud environments.
• Coordinate remediation activities for vulnerabilities identified by Microsoft Defender for Cloud, MEND, and penetration testing exercises.
• Oversee remediation programmes arising from penetration test findings for platform releases.
• Administer and optimise Microsoft Defender for Cloud, including security policies, alert management, recommendations, and exclusion governance.
• Design and improve security monitoring processes and integrations between Microsoft Defender for Cloud, ServiceNow, and the SOC.
• Develop and enhance threat detection and monitoring capabilities within Microsoft Sentinel in collaboration with the SOC.
• Manage and tune Azure Web Application Firewall (WAF): analyse blocked requests, optimise rules, and implement business-required rule exclusions.
• Assess the security impact of WAF exemptions and provide risk-based recommendations to stakeholders.
• Conduct security reviews and risk assessments for new projects, infrastructure changes, and application releases.
• Support cloud and application teams in resolving security-related issues and implementing security controls.
• Prepare security reports, risk presentations, and technical recommendations for project stakeholders and client governance forums.
• Lead the architectural design and secure implementation of Azure cloud infrastructure with emphasis on operational excellence, troubleshooting, and cost management.
• Drive service operations and delivery assurance processes to align with contractual and stakeholder expectations.
• Provide technical vision and leadership to motivate the team to deliver incremental improvements aligned with client contracts and relationship goals.
• Foster a proactive, collaborative approach in managing relationships with clients and internal stakeholders.

About the project

This is how we work on a project

• Continuous Deployment
• Continuous Integration

What we offer

• Part-time (50%) role allowing for flexible working arrangements consistent with project needs.
• Opportunity to lead security and infrastructure efforts on a high-impact Azure-based programme.
• Collaborative, outcomes-focused project environment.

Benefits

• sharing the costs of sports activities
• private medical care
• remote work opportunities

Recruitment stages

• 1.
  Screening Call
• 2.
  Cultural Fit Interview
• 3.
  Technical Interview
• 4.
  Final Round Interview

YOUR ITEAMS sp. z o.o.