Cloud Security Engineer

ABOUT THE OPPORTUNITY Join Hexa as a Cloud Security Engineer and help strengthen public cloud security within the banking sector. Based in Porto, you will work with an international, multidisciplinary team to implement security controls, assess cloud architectures and ensure compliance with security requirements across enterprise cloud environments. - Hybrid 2x per week in office WHAT YOU WILL DO - Implement and enforce cloud security controls covering identity, access, network protection and data security. - Assess cloud architectures and identify security risks in critical business applications. - Ensure compliance with internal security policies and cloud governance requirements. - Conduct security assessments of PaaS services and recommend risk mitigation measures. - Configure cloud governance controls using native security tools. - Automate security processes and infrastructure configurations through Infrastructure as Code (IaC). - Collaborate with technical teams to promote secure cloud architecture and continuous improvement. - Monitor emerging cloud security threats, technologies and best practices. WHAT WE ARE LOOKING FOR - 6 to 9 years of professional experience, including at least 5 years in cloud security or similar roles. - Strong expertise in Azure or Google Cloud Platform (GCP). - Experience designing and implementing secure cloud architectures. - Solid understanding of cloud security governance, compliance and risk management. - Ability to assess technical risks and provide practical security recommendations. - Analytical thinking, autonomy and a proactive approach to problem-solving. - Strong collaboration skills, adaptability and a responsible approach to delivery. TECHNICAL SKILLS - Microsoft Azure or Google Cloud Platform (GCP). - Cloud security architecture, governance and compliance. - Identity and Access Management (IAM), RBAC and least privilege principles. - Network security, security perimeters and data protection. - Azure Policy and GCP Organization Policies. - PaaS security assessments and risk analysis. - Terraform and Infrastructure as Code (IaC). - Git, Jenkins and CI/CD pipelines. - Security automation and cloud configuration management. NICE TO HAVE - Experience with both Azure and GCP. - Knowledge of AWS security services. - Python scripting for security automation. - Experience with third-party cloud security governance tools. WHAT WE OFFER - Private health insurance from day one, with optional family coverage. - Free, confidential mental health support. - Continuous training, certifications and career development. - Upskilling in information security, cloud security and cybersecurity best practices. - Flexibility whenever the role and operational context allow it. - Childcare vouchers and family support initiatives. - Team activities, knowledge sharing and accessible leadership. EQUAL OPPORTUNITY Hexa promotes an inclusive workplace where different backgrounds, perspectives and experiences are valued. In alignment with the Portuguese Diversity Charter, we are committed to equal opportunities, fairness and mutual respect. HEXA LIFE At Hexa, we are all Builders. Our culture is built on Honesty, Mutual Support and Agility. We value ownership, collaboration and continuous learning, creating an environment where every professional contributes to meaningful solutions and lasting relationships. We Build Together.