Cloud Security Engineer (Azure) — Zero Trust rollout.

Bluefield Energy, a European renewable-energy scale-up, is rolling out a Zero Trust architecture across its Azure estate and is looking for a hands-on cloud security engineer to drive the technical implementation. The security roadmap has been approved at board level; your job is to turn it into working controls without slowing down the sixty-plus engineers who ship to production daily.

The scope includes conditional access and PIM redesign in Entra ID, network micro-segmentation for the OT-adjacent workloads, Defender for Cloud hardening and the migration of secrets to a centrally governed Key Vault model. You will also codify the guardrails in Terraform and Azure Policy so they survive after your assignment ends, and you pair with the platform team to embed security checks in the CI/CD pipelines.

We expect deep, current Azure security experience (AZ-500 level or beyond), strong infrastructure-as-code skills and the communication style to win over sceptical developers. The team works fully remote across European time zones, with a quarterly on-site week in Amsterdam.