.
Cloud Security Engineer Summary Embeds security and compliance into the cloud platform by automating identity controls, secrets handling, and policy enforcement, rather than relying on manual reviews.
Responsibilities Design and implement IAM architecture: Microsoft Entra ID, RBAC, managed identities, Privileged Identity Management, and least-privilege access models Implement and manage secrets and key management (Azure Key Vault, rotation policies, workload identity), including Key Vault-backed secret scopes in Databricks Govern data access with Unity Catalog: catalog, schema, and table grants, row filters and column masks, attribute-based access control, storage credentials, and external locations Integrate Databricks with Entra ID: SCIM provisioning, group-based access, and service principals for jobs and automation Write and maintain policy as code (Azure Policy, OPA/Gatekeeper, Sentinel, Checkov) to enforce guardrails Automate compliance checks and evidence collection against frameworks such as CIS, ISO *, SOC 2, or NIST, using Unity Catalog audit logs,



lineage, and system tables Integrate security scanning into CI/CD: IaC scanning, container image scanning, dependency and secret scanning Configure and monitor Microsoft Defender for Cloud and security alerting Review network security design (segmentation, private access, firewall rules) Support audits and respond to security findings and incidents Required Qualifications 4+ years in cloud or infrastructure security Deep knowledge of Azure IAM and Entra ID Experience with secrets management and policy as code Hands-on experience securing Databricks and implementing Unity Catalog access controls Understanding of compliance frameworks and how to automate controls Scripting proficiency and familiarity with IaC Preferred Qualifications Certifications such as AZ-500, SC-300, or CISSP Experience with zero-trust architecture Threat modeling and security incident response experience

📌 Cloud Security Engineer (Málaga)
🏢 Infinity Quest - UK
📍 Málaga