Organizational contextEstablished in 1951, IOM is a UN-related organization and the leading UN agency for migration. It promotes humane and orderly migration, saves lives, protects people on the move, and drives solutions to displacement. The ICT Officer (Cloud Sec Ops Engineer) will lead and evolve IOM's cloud security architecture and operations, ensuring the security, integrity, and compliance of its cloud infrastructure, primarily Azure, for global offices.Job purposeThe ICT Officer (Cloud Sec Ops Engineer) is responsible for leading and evolving IOM's cloud security architecture and operations. This role ensures the security, integrity, and compliance of IOM’s cloud infrastructure, with a primary focus on Azure and an awareness of multi-cloud environments. Key responsibilities include threat detection, incident response, security automation, and hardening of cloud environments to support IOM's general operations. The position involves close collaboration with development, operations, and information security teams to identify and analyze vulnerabilities, support the mitigation of these vulnerabilities, enforce compliance, and foster a security-aware culture within the organization. The role operates under the supervision of the Chief Technology Officer and the Senior ICT Officer (Cloud Services).ResponsibilitiesKey responsibilities include implementing and managing 24/7 security monitoring using tools like Microsoft Sentinel and Defender for Cloud, and defining incident detection and management workflows. The role involves enforcing Zero Trust principles through Azure AD Conditional Access, PIM, and RBAC, and auditing privileged access. Ensuring compliance with regulations like GDPR and ISO 27001, conducting vulnerability scans, and automating compliance checks using Azure Policy are crucial. The position requires embedding security into CI/CD pipelines, scanning Infrastructure-as-Code templates for misconfigurations, and proactively hunting for threats using KQL queries.
Automation of responses via Azure Logic Apps and Functions is also a key duty. Collaboration with other teams, training on best practices, and providing technical expertise are essential, alongside optimizing cloud spending.EducationA Master’s degree in Cybersecurity, Computer Engineering, Computer Science, or a related field with five years of relevant experience, or a University degree with seven years of relevant experience. Required certifications include Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Fundamentals, ITIL v4 Foundation (within 6 months), and Certified Cloud Security Professional (CSSP). CISSP and AWS Certified Security Specialist are advantageous.Work experienceRequires a minimum of 5 years in Cloud Sec Ops engineering, with strong hands‑on experience in Azure services (Sentinel, Defender for Cloud, Key Vault, Firewall). Proven experience in managing cloud infrastructure in AWS and Azure through automation is necessary. Expertise in Infrastructure-as-Code tools (Terraform, Cloud Formation, Ansible), CI/CD tools (Jenkins, Git Hub Actions, Azure Dev Ops), and scripting languages (Python, Bash, Power Shell) is essential. Knowledge of containerization (Docker) and orchestration (Kubernetes) is required, along with familiarity with monitoring tools and solid understanding of security best practices.SkillsDemonstrated experience in cloud security controls (Azure primary, AWS secondary). Strong understanding of NIST CSF, MITRE ATT&CK, ITIL/ITSM frameworks. Knowledge of cloud security fundamentals, programming languages (Python, C++, JAVA), Dev Ops, containerization, networking protocols, and cloud platforms (AWS, Azure). Proficiency in Ia C tools (Terraform, Cloud Formation, Ansible) and CI/CD tools (Jenkins, Git Lab CI/CD, Git Hub Actions). Expertise in Azure AD, VPN, VPC, encryption, DNS, Load Balancers, Kubernetes, scripting (Power Shell, Python, KQL), and Azure Policy. Project management and ability to handle confidential data are also key.Required languagesEnglishDesired languagesArabic, French, Russian, Spanish#J-18808-Ljbffr
📌 Information And Communications Technology (Ict) Officer (Cloud Secops Engineer) (P)
🏢 IOM
📍 Madrid