DevSecOps

# Think Data Be Smart #

About Us: DataSmart is a Portuguese company, positioning itself as a consulting company of excellence, with over 20 years of existence. We are specialized in Technologies and Information Systems services, for the Portuguese and International markets. We pride ourselves on fostering a culture of involvement, experience, and excellence.

Join our team as a DevSecOps (Hybrid – Lisbon)!

What You’ll Do:

• Define and enforce security guidelines, governance models, and best practices for cloud service adoption across Azure environments.
• Design, implement, and maintain secure Azure cloud architectures and landing zones aligned with organizational security policies.
• Automate infrastructure and security deployments using Terraform, Terragrunt, Ansible, and CI/CD pipelines.
• Implement and manage cloud-native security controls, including Azure Policies, RBAC/IAM, managed identities, and security governance frameworks.
• Administer and optimize security services such as Microsoft Defender and Entra ID (Azure AD).
• Monitor cloud environments for threats, vulnerabilities, and suspicious activities, ensuring rapid incident response and remediation.
• Support secure cloud migration initiatives, ensuring compliance with internal standards and industry security frameworks.
• Collaborate with infrastructure, DevOps, and application teams to strengthen application and network security across cloud environments.
• Implement and maintain microsegmentation and network security controls, including NSX firewall tag-based policies where applicable.
• Contribute to security hardening initiatives based on CIS benchmarks and security best practices.
• Produce and maintain technical documentation, operational procedures, and security guidelines.
• Stay updated on emerging cloud security technologies, trends, and innovative solutions to continuously improve the security posture.

Qualifications:

• Minimum 5 years of experience in IT, including at least 2 years focused on Azure cloud security architecture, implementation, and management.
• Strong hands-on experience with Microsoft Azure, including cloud security, governance, and landing zone design.
• Experience with automation and Infrastructure as Code tools such as Terraform, Terragrunt, and Ansible.
• Experience integrating and securing CI/CD pipelines using GitLab, Azure DevOps, or similar platforms.
• Solid knowledge of Entra ID (Azure AD), Microsoft Defender, IAM/RBAC, and managed identities in Azure.
• Knowledge of cloud-native security controls such as Azure Policies, CSPM solutions, image security scanners, and container threat detection.
• Understanding of application security principles in cloud-native environments.
• Experience with network security and microsegmentation concepts, including NSX and tag-based firewall rules.
• Familiarity with CIS hardening and cloud security best practices.
• Experience designing or securing cloud migration projects is valued.
• Knowledge of Microsoft Cloud Adoption Framework (CAF) is a plus.
• Microsoft cloud certifications are considered an advantage.
• Strong analytical, troubleshooting, and problem-solving skills.
• Innovative mindset with adaptability to changing technologies and priorities.
• Excellent communication, collaboration, and documentation skills.
• English proficiency at a professional level (minimum B2).
• Living in Portugal and available to work in a hybrid model.

At DataSmart, you will have the opportunity to integrate into a solid company and participate in projects of high recognition, nationally and internationally, with an appealing technological environment and career progression.

Excellence in the way to the future!

To apply for this opportunity, please send your CV to careers@datasmart.pt with the subject “Cloud Security Engineer – Lisbon”.

Connect with Us: Follow us on LinkedIn for updates on career opportunities, company news, and industry insights! For further details, visit us at www.datasmart.pt

#JoinOurTeam #DataSmart #ThinkDataBeSmart #CloudSecurity #Azure #Terraform #Ansible #MicrosoftDefender #EntraID #CyberSecurity #DevSecOps #CloudEngineering