. Cloud Security Engineer Summary Embeds security and compliance into the cloud platform by automating identity controls, secrets handling, and policy enforcement, rather than relying on manual reviews.
Responsibilities
- Design and implement IAM architecture: Microsoft Entra ID, RBAC, managed identities, Privileged Identity Management, and least-privilege access models
- Implement and manage secrets and key management (Azure Key Vault, rotation policies, workload identity), including Key Vault-backed secret scopes in Databricks
- Govern data access with Unity Catalog: catalog, schema, and table grants, row filters and column masks, attribute-based access control, storage credentials, and external locations
- Integrate Databricks with Entra ID: SCIM provisioning, group-based access, and service principals for jobs and automation
- Write and maintain policy as code (Azure Policy, OPA/Gatekeeper, Sentinel, Checkov) to enforce guardrails
- Automate compliance checks and evidence collection against frameworks such as CIS, ISO 27001, SOC 2, or NIST, using Unity Catalog audit logs, lineage,



and system tables
- Integrate security scanning into CI/CD: IaC scanning, container image scanning, dependency and secret scanning
- Configure and monitor Microsoft Defender for Cloud and security alerting
- Review network security design (segmentation, private access, firewall rules)
- Support audits and respond to security findings and incidents

Required Qualifications
- 4+ years in cloud or infrastructure security
- Deep knowledge of Azure IAM and Entra ID
- Experience with secrets management and policy as code
- Hands-on experience securing Databricks and implementing Unity Catalog access controls
- Understanding of compliance frameworks and how to automate controls
- Scripting proficiency and familiarity with IaC

Preferred Qualifications
- Certifications such as AZ-500, SC-300, or CISSP
- Experience with zero-trust architecture
- Threat modeling and security incident response ex

📌 Cloud Security Engineer (España)
🏢 Infinity Quest - UK
📍 España