Position: Senior Cloud Security Engineer (Poland)
Company: Luxoft
Experience required: 3y
English level: upper

As a Cloud Security Engineer, you will be part of the global Enterprise Security Services team, primarily focusing on Identity and Access Management, Identity protection, Zero-trust and process automation. The team's goal is to address the many challenges that arise from a hybrid cloud environment. This requires a broad level of systems integration knowledge, an analytical and security focused mindset. This is very much a technical hands-on role where prior development/scripting experience is mandatory.

You will contribute on strategic global projects where deep technical knowledge and core infrastructure and development skills are required. You will be responsible for technical design, testing, implementation and documentation of Cloud Security Services focused around the Microsoft Identity Platform. You will work closely with key stakeholders to help build out a well-defined operational model.

You will be a member of a small team that forms part of the broader Enterprise Security Services organization. The team has a geographic spread, with main hub sites in Zurich, Poland, Raleigh (US) and Singapore. The team has a strong background in on premise Directory Services, Authentication and Automation using a mix of custom-built tools as well as Microsoft Identity Manager. In the last few years, the focus has been shifting towards cloud security (specifically Azure AD) and automation, with the immediate teams focus on the core feature set of Azure AD and hybrid identity-related inter-dependencies.
Responsibilities:
- Design, deliver, maintain and deploy security baselines and automation solutions for Azure hybrid cloud identity platform.

- Stay current on current and future cloud security technology trends, influencing and contributing to the overall IAM cloud security architectural roadmap.

- Design and deliver Azure B2B solutions including SaaS integration, partner federation (SAML, OIDC), related tenant security and entitlement management controls.

- To represent IAM in supporting M365 and general application cloud adoption in Azure.

- Design, deliver, and maintain identity provisioning systems and automation processes - AADConnect/Microsoft Identity Manager along with some custom scripting / .NET development.

- Deliver operational monitoring and management processes to maintain a healthy security baseline.
Mandatory Skills Description:
- 4.years with solid technical expertise/background within Security / Identity and Access Management. Including experience in enterprise scale cloud security environment.
- Hands-on experience in automation (development, scripting, terraform, Microsoft Identity Manager, AAD Connect).
- Strong knowledge of Cloud Security, specifically in the area of Azure and / or other cloud platforms (considered a plus).
- Strong knowledge of inter-organizational, cross platform hybrid architectures.
- Strong knowledge of Identity and Access Management, Modern authentication / SSO and authorization.
- Hands-on experience with Federation Services, API management, Identity and Access Management processes and associated tooling a strong plus.
- Excellent analytical / problem solving skills.
- Strong interpersonal skills and good English language skills.
- Strong documentation skills.
- Proven time management skills.
- Demonstrate a delivery focused mindset with ability to work independently
Nice-to-Have Skills:
- Hands-on experience with Active Directory or LDAP Services a strong plus.
- Azure security qualifications considered a plus
- A good overview of PKI and / or encryption
- AWS Control Tower experience is a plus
- Hands-on experience with Active Directory or LDAP Services a strong plus.
Languages:
English: B2 Upper Intermediate