Cloud Security - Azure Key Vault Consultant

Cloud Security - Azure Key Vault Consultant

Miejsce pracy: Warszawa

Technologies we use

Expected

• Microsoft Azure
• Azure Key Vault
• Azure Managed HSM
• Microsoft Entra ID
• Terraform
• Bicep

Optional

• Microsoft Defender

About the project

In Cyclad we work with top international IT companies in order to boost their potential in delivering outstanding, cutting edge technologies that shape the world of the future. Currently, we are looking for an experienced

Cloud Security - Azure Key Vault Consultant to design and implement secure cloud solutions for protecting sensitive assets, including software licenses, activation keys, and confidential data within the Microsoft Azure ecosystem.

In this role, you will be responsible for delivering enterprise-grade security solutions based on Microsoft's security best practices, Zero Trust principles, and Identity & Access Management (IAM).

Location: 100% remote

Type of employment: B2B contract

Remuneration: 140 - 160 PLN net + VAT per hour on B2B

Project languages: Polish and English

This is how we organize our work

This is how we work

• at the client's site
• you focus on a single project at a time
• you have influence on the technological solutions applied

Your responsibilities

• Design and implement a secure solution for storing software licenses, activation keys, and confidential data in Microsoft Azure.
• Configure and manage Azure Key Vault and Azure Managed HSM.
• Implement security controls aligned with the Zero Trust architecture.
• Integrate security services with Microsoft Entra ID, Multi-Factor Authentication (MFA), Conditional Access, and Privileged Identity Management (PIM).
• Configure Role-Based Access Control (RBAC) and Just-in-Time (JIT) access models.
• Implement monitoring, auditing, and security event integration with Microsoft Sentinel.
• Design protection mechanisms against unauthorized access, bulk key extraction, and system compromise.
• Prepare technical documentation and conduct knowledge transfer sessions for the client's technical team.

Our requirements

• At least 3 years of hands-on experience delivering Microsoft Azure projects.
• Strong practical experience with Azure Key Vault, Azure Managed HSM, and Microsoft Entra ID.
• Proven expertise in Cloud Security and Identity & Access Management (IAM).
• Solid knowledge of RBAC, Conditional Access, MFA, and Privileged Identity Management (PIM).
• Experience designing and implementing solutions based on Zero Trust principles.
• Hands-on experience with Microsoft Sentinel, Azure Monitor, and Log Analytics.
• Experience with Infrastructure as Code (IaC) tools such as Terraform, Bicep, or equivalent.
• Ability to create high-quality technical documentation and deliver technical workshops or knowledge transfer sessions.

Optional

• Microsoft certifications such as AZ-500, SC-300, or SC-100.
• Experience with projects involving data protection, cryptography, or Hardware Security Modules (HSM).
• Knowledge of Microsoft Defender for Cloud.

What we offer

• Private medical care with dental care (covering 70% of costs). Family package option possible
• Multisport card (also for an accompanying person)
• Life insurance
• Work with talented engineers on large-scale, technically challenging projects

Development opportunities we offer

• intracompany training
• mentoring
• substantive support from technological leaders
• technical knowledge exchange within the company

Benefits

• sharing the costs of sports activities
• private medical care
• life insurance
• remote work opportunities
• flexible working time
• integration events
• dental care
• no dress code

Cyclad

In Cyclad we work with top international IT companies in order to boost their potential in delivering outstanding, cutting edge technologies that shape the world of the future.

Please enclose the following statement in your application: I hereby give consent for my personal data contained in the submitted application documents to be processed by Cyclad sp. z o.o., ul. Chłodna 48/1, 00-872 Warszawa, including my image, in relation to my participation in the recruitment process. I acknowledge that the above consent may be withdrawn at any time.
If you are interested in participating in future recruitment processes, please enclose the following statement in your application: I hereby give consent for my personal data contained in the submitted application documents to be processed by Cyclad Sp. z o.o., Cyclad sp. z o.o., ul. Chłodna 48/1, 00-872 Warszawa, including my image, in relation to my participation in future recruitment processes. I acknowledge that the above consent may be withdrawn at any time. The Personal Data Controller is Cyclad Sp. z o.o., ul. Chłodna 48/1, 00-872 Warszawa, e-mail: Wyświetl e-mail na pracuj.pl, contact with the Data Protection Officer is available via e-mail: Wyświetl e-mail na pracuj.pl. Personal data collected through job applications (CV) within the scope provided for in labor regulations shall be processed in order to allow performance of the ongoing recruitment pursuant to Art. 6(1)(a) of Regulation (EU) no. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (further referred to as GDPR). In case of giving consent to processing of data for future recruitment processes – personal data shall be processed under the consent, pursuant to Art. 6(1)(a) of the GDPR. If the Application form contains data referred to in Art. 9(1) of the GDPR, it shall be necessary to have the candidates consent for the processing of such data (Art. 9(2)(a) of the GDPR). The consent can be revoked at any time. Withdrawal of the consent shall not affect the lawfulness of the processing that had been performed under the consent prior to its withdrawal. Personal data provided by the candidate related to: - participation in a selected recruitment process will be stored until the recruitment process is completed for a given position, - participation in future recruitment processes will be stored until the candidate's consent to the processing of their data for this purpose is withdrawn, no longer, however, than for 5 years since the last update of the candidate’s data. Personal data may be disclosed to employees or associates of the Company, entities providing support to the Company on the basis of outsourced services or in accordance with data processing agreements, to entities authorized under the law, as well as to entities collaborating with the Company within the scope of job placement, in order to conduct recruitment processes. After the employee’s consent, personal data may also be disclosed to a potential employer for whom the recruitment process is being conducted. Submission of the candidate’s personal data within the scope under Art. 221 of the Labor Code is obligatory for participation in the recruitment process. Submission of other data by the candidate is voluntary. No submission of personal data within the required scope or objection to the processing of such data shall result in lack of possibility to include the Application in the recruitment processes conducted by the Company. The candidate has the right to access and rectify the contents of their data, remove such data, limit its processing, transfer such data, submit objection to the processing and revoke the consent at any time, without affecting the lawfulness of the processing conducted under such consent before it was withdrawn. The candidate also has the right to file a complaint with the President of the Office for Personal Data Protection when they consider the processing of their personal data to be a violation of the provisions of the GDPR.