Company Overview

The organisation operates within the financial technology sector, developing and supporting digital financial services that depend on secure cloud environments, reliable infrastructure, and effective protection of sensitive information. Its technology landscape may include cloud-hosted applications, payment integrations, customer-facing platforms, internal business systems, and data processing services that require strong security controls and consistent operational oversight.

The Security & Infrastructure department works closely with software engineering, platform engineering, compliance, and operational teams to protect systems throughout their lifecycle. Its responsibilities include cloud security architecture, identity and access management, vulnerability prevention, infrastructure monitoring, incident response, and the continuous improvement of technical safeguards.

The organisation recognises that financial technology requires security practices that address confidentiality, integrity, availability, and traceability. Its approach emphasises secure-by-design principles, automation, risk-based controls, and collaboration between security specialists and the teams responsible for developing and operating financial applications.

This remote opportunity is suited to an experienced cloud security professional who can combine technical expertise with practical risk assessment and help maintain secure, resilient cloud infrastructure.

Role Summary

The Senior Cloud Security Engineer will design, implement, assess, and improve security controls across cloud infrastructure and supporting technology platforms. The role requires a strong understanding of cloud architecture, identity management, network security, workload protection, encryption, secrets management, and security monitoring.

Working with cloud engineers, DevOps specialists, software developers, and compliance stakeholders, the engineer will identify infrastructure vulnerabilities, strengthen security configurations, automate security checks, and support the investigation of potential security incidents. The position will also contribute to security architecture reviews and help ensure that new infrastructure and application deployments follow appropriate security standards.

The successful candidate will be expected to move beyond identifying weaknesses and take an active role in implementing sustainable improvements. This includes developing reusable security controls, reducing unnecessary permissions, improving configuration management, and helping engineering teams integrate security into their regular workflows.

Key Responsibilities

• Design and maintain cloud security architectures for applications, infrastructure services, data storage, and financial technology workloads.

• Implement and review security controls across cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform.

• Establish and maintain identity and access management policies, applying least-privilege principles, role-based access, and appropriate separation of duties.

• Review cloud network configurations, security groups, firewalls, private connectivity, and segmentation controls to reduce unnecessary exposure.

• Implement appropriate encryption controls for data at rest and in transit, including secure management of cryptographic keys and certificates.

• Strengthen secrets management practices to protect API keys, application credentials, service accounts, and other sensitive configuration data.

• Conduct cloud configuration assessments to identify publicly exposed resources, excessive permissions, insecure defaults, and other weaknesses.

• Integrate automated security checks into infrastructure-as-code workflows and CI/CD pipelines to detect configuration issues before deployment.

• Collaborate with DevOps and platform engineering teams to develop secure infrastructure templates, hardened deployment configurations, and repeatable security controls.

• Monitor cloud security events, identity activity, configuration changes, and relevant system logs to identify suspicious behaviour or potential compromise.

• Investigate security findings, assess their business impact, prioritise remediation, and track corrective actions through to completion.

• Support vulnerability management by evaluating affected systems, coordinating patching activities, and verifying that remediation measures are effective.

• Participate in security architecture reviews for new applications, infrastructure migrations, third-party integrations, and significant technical changes.

• Contribute to incident response activities involving compromised credentials, unauthorised access, insecure cloud resources, or other infrastructure-related threats.

• Develop and maintain security documentation covering cloud architecture, access controls, monitoring procedures, incident response, and configuration standards.

• Work with compliance and risk teams to provide evidence of relevant security controls and support internal reviews or external assessments.

• Evaluate emerging cloud security technologies and recommend improvements that address identified risks or operational limitations.

• Provide practical security guidance to engineers, helping them understand secure deployment practices and the reasons behind recommended controls.

Requirements and Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline, or equivalent professional experience.

• Several years of professional experience in cloud security, infrastructure security, security engineering, or a closely related technical role.

• Hands-on experience securing at least one major cloud platform, including identity, networking, compute, storage, and monitoring services.

• Strong understanding of identity and access management, least-privilege access, privileged account protection, and service-to-service authentication.

• Experience with infrastructure-as-code tools such as Terraform or OpenTofu and the security implications of automated provisioning.

• Knowledge of cloud networking, DNS, TLS, firewalls, private endpoints, network segmentation, and secure connectivity patterns.

• Experience with cloud security posture management, vulnerability scanning, configuration assessment, or comparable security tooling.

• Familiarity with container security, Docker, Kubernetes, and the protection of cloud-native workloads.

• Understanding of encryption, key management, certificate lifecycle management, secrets protection, and secure configuration practices.

• Ability to interpret security logs, investigate alerts, assess vulnerabilities, and recommend appropriate corrective actions.

• Experience integrating security controls into software delivery pipelines and collaborating with infrastructure and development teams.

• Strong analytical, documentation, and communication skills, with the ability to explain technical security risks to different stakeholders.

• Familiarity with security frameworks and standards such as ISO 27001, CIS Benchmarks, or the NIST Cybersecurity Framework is beneficial.

• Relevant certifications, such as AWS Certified Security – Specialty, Microsoft Azure Security Engineer Associate, or equivalent credentials, are advantageous.

• Experience in fintech, banking, payment processing, or another environment handling sensitive financial information is an advantage.

Benefits

• Remote working arrangements within Estonia, subject to the organisation’s employment policies.

• Opportunity to strengthen the security of cloud environments supporting financial technology services.

• Collaboration with cloud infrastructure, software engineering, compliance, and security professionals.

• Opportunities to develop expertise in cloud security architecture, automated controls, identity management, and incident response.

• Access to relevant professional training, technical knowledge-sharing, and certification development.

• An environment that encourages secure engineering practices, continuous improvement, and evidence-based risk management.

• The opportunity to influence infrastructure security standards and improve the resilience of business-critical applications.

Application Instructions

Candidates should submit an up-to-date CV detailing their cloud security experience, infrastructure technologies, security tooling, and relevant projects. Applicants are encouraged to describe a security improvement they implemented, explaining the original risk, the controls introduced, and how the effectiveness of those controls was assessed.

Applications should be submitted through the relevant recruitment platform or official hiring channel associated with the vacancy. Shortlisted candidates may be invited to discuss cloud architecture, identity and access management, infrastructure-as-code security, vulnerability remediation, and incident response scenarios.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.