Cloud Security Engineer - IAM

You will join our Cloud Center of Excellence. The team is responsible for shaping and securing a modern multi-cloud platform used across critical financial services workloads. The Cloud Security Engineer role offers an opportunity to work with Microsoft Entra ID, Azure, AWS, and cloud security technologies while driving Identity and Access Management, Zero Trust, and cloud governance initiatives across the organisation. Your direct manager will be Krystian Gorzkiewicz , Head of Cloud Center of Excellence. Primary tasks and responsibilities include: Design, implement, and operate Identity and Access Management solutions across Azure and AWS environments. Manage Microsoft Entra ID, Conditional Access, MFA, Privileged Identity Management (PIM), and Identity Governance capabilities. Design and maintain AWS IAM, IAM Identity Center, permission models, federated access, and least-privilege controls. Collaborate with Cloud Architects, Security Engineers, Platform Engineers, Compliance Specialists, and application teams to implement secure cloud onboarding and access models. Automate identity lifecycle management, access provisioning, and governance processes using Infrastructure as Code and scripting. Support audits, compliance reviews, security assessments, and operational risk initiatives related to cloud platforms. Travel occasionally to Denmark (typically 2-4 times per year) and participate in workshops, PI Planning events, and stakeholder meetings. To succeed you will have: A curious mindset, an open nature, and a strong willingness to share knowledge with others. Fluent English communication skills, both written and spoken. A Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience. Hands-on experience with Microsoft Entra ID (Azure AD), Conditional Access, MFA, RBAC, Privileged Identity Management (PIM), and Identity Governance. Experience with AWS IAM, IAM Identity Center, cross-account access, role-based access control, and cloud security best practices. Strong understanding of Zero Trust principles, authentication, authorisation, federation, identity lifecycle management, and cloud platform operations in Azure and, preferably, AWS within regulated or enterprise-scale environments. Knowledge of Infrastructure as Code and automation technologies such as Terraform, Bicep, PowerShell, Python, or GitHub Actions, together with proficiency in GitHub Copilot and M365 Copilot as productivity and engineering accelerators. It's nice-to-have: Microsoft Certified: Azure Administrator Associate (AZ-104) or Microsoft Certified: Identity and Access Administrator Associate (SC-300), or equivalent certification. AWS Certified Security - Specialty, or other AWS security-focused certifications. Experience with Microsoft Defender or AWS security services such as GuardDuty, Security Hub, and CloudTrail. Experience implementing Zero Trust transformation programmes. Experience working in the financial sector or other highly regulated industries. Knowledge of Active Directory, hybrid identity, and federation solutions. Experience supporting audit, compliance, or regulatory requirements such as DORA, ISO 27001, NIS2, or similar. Be your best self with BEC's benefits! We offer a diverse range of benefits for our employees. Here are just a few of them. Mental health support Free lunch at the office Professional development budget Referral bonus up to PLN 10,000 PLN 600 on a benefit platform a month Passion clubs and social events (tennis, salsa dancing, board games, family picnics and more) What does the recruitment process look like? Send us your CV: We want to get to know you Screening call: Let's chat and see if we're a match Technical test: Show off your knowledge! Meet our talent partner and technical expert: Learn more about the job, BEC Poland, and tell us more about your skills and experience. Meet your future manager and team: See who you'll be working closely with. Time to sign the contract: We're ready to welcome you to BEC! If you have any questions about the position, please contact Robert Piec . BEC is in the process of being acquired by our largest customer and co-owner, Nykredit, which is Denmark's largest mortgage provider and third-largest bank. We will become part of a new and larger organization called Nykredit Financial Technologies. In the transition phase, we are recruiting for roles that we expect to be highly needed in our future organization.