Cloud Security & Identity Engineer

At Logicalis Spain we are an international group with more than 20 years of experience in the IT sector, linked to large-scale projects and services in Data Centers, Cybersecurity, and Analytics.

• Stable workplace and permanent contract.

• Hybrid working model.

• Intensive working day every Friday and during summer.

• Day off on your birthday + a personal day.

• Possibility to access flexible compensation plans (restaurant card, transport card).

• We care about your well-being; you will have access to Private Medical Insurance and Wellhub (Gympass).

• Significant discounts on various services and training as a Logicalis employee (retail, electronics, travel...)

• Training and certifications adapted to your job position.

• Professional development with cutting-edge projects and current technologies in the market.

At Logicalis Spain, we are looking for a Cloud Security & Identity Engineer to join one of our clients.

The person will be responsible for designing, implementing, and supervising security controls in hybrid cloud environments (Azure and GCP), focusing on the protection of workloads, identities, and networks. They will act as a technical reference for CSPM/CNAPP tools and lead hardening, detection, and response initiatives to reduce the organization's attack surface.

• Evaluate and reinforce the security posture in Azure subscriptions and GCP projects.

• Manage security policies, RBAC, Conditional Access, and Defender for Cloud in Azure.

• Implement and maintain Security Command Center and security controls in GCP.

• Review IaaS, PaaS, and container configurations to detect deviations and misconfigurations.

• Administer and optimize CSPM tools (e.g., Prisma Cloud, Wiz, Defender CSPM) for continuous visibility.

• Manage CNAPP platforms by integrating cloud-native workload protection (CWPP, KSPM, DSPM).

• Define compliance benchmarks (CIS, NIST, ISO 27001) and automate remediations.

• Coordinate with DevSecOps teams to integrate security into CI/CD pipelines.

• Design and manage Zero Trust identity architectures in hybrid and multi-cloud environments.

• Administer Azure AD / Entra ID: conditional access policies, PIM, MFA, and SSO.

• Review and audit excessive permissions and privileged accounts in the cloud (CIEM).

• Implement controls for privilege escalation and lateral movement prevention.

• Design network segmentation in cloud environments: VNets, VPCs, NSGs, Firewall rules, and Private Endpoints.

• Review hybrid connectivity architectures (ExpressRoute, VPN, Interconnect).

• Analyze traffic flows, firewall rules, and WAF/DDoS configuration.

• Support in network forensic analysis and incident investigation.

• Perform technical cloud security assessments and develop improvement roadmaps.

• Document reference architectures, security policies, and procedures.

• Accompany internal/external clients in secure cloud transformation projects.

• Participate in incident response and red team / blue team exercises.