Empresa:

Extia

Descrição da Função

You want to join a company that places people at the heart of its concerns? We are waiting for you at Extia!

Extia is an engineering consultancy which proposes since 2007 an unprecedented approach in its sector by combining well-being and performance at work. A successful model: more than 3000 Extians working in 22 agencies in France and abroad, 1st Great Place To Work in France, 160 millions of euros of turnover and plenty of energy!

At Extia, it's "First who, then what" so, let's do it!

First who:

• Strong problem-solving skills with the ability to break down complex challenges into practical solutions
• Excellent communication skills, able to explain technical concepts to both technical and non-technical stakeholders
• Business-oriented mindset with an understanding of how data supports organizational goals

What You'll Do:

• Design, implement, and enforce cloud security controls across multiple cloud platforms, focusing on IAM, data security, and security perimeters
• Ensure compliance with internal cloud security policies and standards
• Perform cloud security assessments and risk analyses for applications and infrastructure
• Review and validate security architecture for critical cloud-based business projects
• Implement governance controls using native cloud tools (e.g., Azure Policy, GCP Organization Policies)
• Develop and automate security processes using Infrastructure as Code (IaC) tools and CI/CD pipelines
• Stay up to date with the latest cloud security threats, trends, and technologies

What We're Looking For:

• Minimum 5 years of experience in cloud security, with a focus on IAM or cloud network security
• Strong expertise in at least one cloud platform (GCP or Azure required; both is a plus)
• Solid understanding of Identity and Access Management (IAM) principles (e.g., Least Privilege, RBAC)
• Experience designing and implementing secure cloud architectures aligned with best practices and compliance frameworks
• Hands-on experience conducting security assessments for PaaS services and providing risk mitigation recommendations
• Experience with governance and policy enforcement tools (e.g., Azure Policy, GCP Organization Policies)
• Proficiency in scripting and automation using tools such as Terraform, Git, Jenkins, and CI/CD pipelines
• Strong problem-solving skills, adaptability, and a solid work ethic
• Fluency in English and Portuguese; alternatively, English and French

Observações

Porto (Portugal)