Senior Private Cloud Security Engineer

About the role

Azqore, a subsidiary of Indosuez Wealth Management (Crédit Agricole Group) serving about thirty clients through its S2i platform, is looking for a Senior Private Cloud Security Engineer. The role covers the security engineering of Azqore's private-cloud platforms and workloads, with a primary focus on Virtuozzo Application Platform and Virtuozzo Hybrid Infrastructure, establishing secure patterns, hardening, segmentation, secrets management, observability and audit-ready evidence for regulated workloads.

Key responsibilities

• Design and maintain the security baseline for VAP/VHI, virtualization or OpenStack-like components, translating threats and regulations into practical controls.
• Define secure patterns for DEV, SIM, UAT, EXP and sandbox environments, including tenant separation, administrative boundaries and controlled connectivity.
• Specify and review segmentation, firewall rules, bastion and jump-host access, TLS, DNS and restricted-egress patterns, applying least connectivity and producing traceable flow documentation.
• Establish CIS-aligned hardening, secure configuration, patching follow-up, vulnerability management and drift controls.
• Participate in designing Vault namespaces, policies, authentication, rotation, TTL and revocation; secure GitLab JWT and production AppRole patterns; prevent clear-text secrets in Terraform/Ansible.
• Review and harden centralized Ansible content and IaC, and define code-review, testing, promotion, inventory and credential-handling practices.
• Take part in governance of internal Docker and Nexus registries, approved base images, scanning, SBOM, provenance and promotion of trusted images.
• Define security logging and telemetry with ELK/EFK, Open Telemetry and Splunk, ensuring key events are detectable and retained.
• Create runbooks, exception handling, incident support, evidence packs and knowledge transfer, and set up ownership with Infrastructure, Network, SOC, IAM, DevOps and application teams.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science or equivalent.
• At least 8 years of hands-on security experience.
• Experience building and implementing security baselines across several infrastructure owners, turning incomplete requirements into clear designs, evidence and documentation.
• Hands-on architect-builder who does more than advise, and takes part in deployment and production support.
• Autonomous, tenacious and rigorous, able to organise themselves amid many ongoing issues.

Required skills

• Private cloud, Kubernetes, OpenStack, OpenShift, VMware or equivalent.
• Linux and container hardening, vulnerability management, network segmentation, firewalling, TLS and DNS.
• HashiCorp Vault or comparable secrets management.
• GitLab CI/CD and Ansible security, container image and registry governance, SBOM.
• Security logging, SIEM integration and operational evidence.