Senior Cloud Security Engineer – Azure, AWS

AJAT GmbH

. Analyze existing Azure and AWS environments, identify security risks, and implement appropriate measures for identities, permissions, networks, workloads, and data .

Posted 10/18/2026full-timeCologne • GermanySenior💰 €60,000 - €90,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing and securing Azure and AWS environments, implementing identity and access management solutions, and developing security policies using Microsoft tools. Proficient in scripting with PowerShell and applying Zero Trust principles to enhance security measures.

Highest-signal resume keywords

Azure Environment ManagementAWS Environment ManagementMicrosoft Entra IDPowerShell ScriptingIdentity And Access Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AzureAWSMicrosoft IntuneIdentity And Access ManagementNetwork SecuritySecurity Compliance PoliciesInfrastructure As CodeTerraformBicepSecurity Audits

Soft Skills

Technical CommunicationProject CoordinationProblem Solving

Tools & Technologies

Microsoft Entra IDConditional AccessPrivileged Identity ManagementAWS IAMMicrosoft Intune

Certifications & Qualifications

Microsoft CertificationsAWS Certifications

Industry Keywords

Zero Trust PrinciplesCloud SecuritySensitive Data ProtectionIT SecurityProduction Environment Management

Tech Stack

Tools & technologies

AWSAzureCloudTerraformTypeScript

About the role

Key responsibilities & impact

Analyze existing Azure and AWS environments, identify security risks, and implement appropriate measures for identities, permissions, networks, workloads, and data
Develop transparent access and permission models and implement them using Microsoft Entra ID, Conditional Access, Privileged Identity Management, AWS IAM, and roles
Put Zero Trust principles into practice by validating identities and device health, enforcing least privilege, and defining clear access rules
Configure security and compliance policies in Microsoft Intune, analyze issues, and introduce changes in a controlled manner
Develop maintainable PowerShell scripts for audits, configurations, and recurring tasks
Assess security findings and misconfigurations, prioritize remediation measures, and verify their effectiveness
Communicate technical decisions clearly with customers and team members
Coordinate changes and create clear, traceable technical documentation
Assume technical responsibility for cloud and security projects
Present two relevant projects in your application, ideally one involving Azure and one involving AWS

Requirements

What you’ll need

Completed degree in Computer Science, IT Security, or a comparable field, along with more than five years of relevant professional experience; OR completed IT vocational training, such as training as an IT Specialist for System Integration, along with at least eight years of relevant professional experience
Very strong, demonstrable practical knowledge of Azure and AWS
Experience independently managing and securing production environments, with the ability to explain your contributions using specific projects
Solid experience with Microsoft Entra ID, Microsoft Intune, and PowerShell
Strong understanding of identity and access management, network security, logging, and the protection of sensitive data
Experience planning, testing, deploying, and, where necessary, safely rolling back security changes
Excellent German language skills at a minimum C1 level
Ability to work on-site in Cologne from the agreed start date
Authorization to work in Germany in the advertised position from the start date
Additional experience with Infrastructure as Code, such as Terraform or Bicep
Additional experience with cloud security platforms and analyzing security alerts
Additional experience working on customer projects for an IT services provider
Current Microsoft or AWS certifications are an additional advantage

Benefits

Comp & perks

Permanent employment contract
Six-month probationary period
40 hours per week
30 days of annual leave
Technical responsibility for cloud and security projects
Collaboration with a team of IT and security professionals
Direct interaction with customers and the opportunity to help shape technical decisions
Opportunity to build reusable security standards, automations, and documentation