DevSecOps Engineer – Cloud Security & Automation

About the role

agap2IT is looking for a DevSecOps Engineer to strengthen its Cloud Security practice in Lisbon. You will combine security expertise with automation to protect Azure environments and streamline identity, access, and compliance processes.

Key responsibilities

• Design, implement and maintain security controls for Microsoft Azure workloads.
• Configure and manage Microsoft Defender and Entra ID for identity and access management.
• Automate infrastructure provisioning and security hardening using Terraform and Ansible.
• Integrate security checks into CI/CD pipelines and support continuous delivery.
• Apply network micro‑segmentation and enforce Microsoft GSA and CIS hardening frameworks.

Required profile

• Bachelor’s degree in Computer Engineering or a related field.
• At least 5 years of professional experience in a DevSecOps or Cloud Security role.
• Strong hands‑on experience with Microsoft Azure security services.
• Proficiency in automation tools such as Terraform and Ansible.
• Fluent English (minimum B2); French is a plus.

Required skills

• Microsoft Azure
• Microsoft Defender
• Entra ID (Azure AD)
• Terraform
• Ansible
• CI/CD pipelines
• Network microsegmentation
• Microsoft GSA hardening framework
• CIS hardening benchmarks

What we offer

• Health, life and personal accident insurance.
• Free technical, behavioral and language training, plus certifications.
• Discounts platform across multiple sectors.
• Vodafone mobile and broadband plan.
• Access to nutrition, psychology and general medicine consultations.
• Continuous, personalized career development support.