Staff Platform Engineer - Azure

Location: Full remote in Germany, the Netherlands, Denmark, Spain, or Portugal; hybrid in Amsterdam, Berlin, Copenhagen, Madrid, or Porto

Company

hirify.global is a financial copilot for entrepreneurs and small businesses, providing invoicing, accounting, payroll, business accounts, payments, and financing as part of Cegid.

What you will do

• Define and implement security architecture for the Azure cloud estate, including policy guardrails, network security, encryption, identity hardening, and secure defaults.
• Own the security of the Azure landing zone and support secure workload migrations from on-premises environments.
• Secure Entra ID through conditional access, Privileged Identity Management, workload identity governance, federation hardening, and tenant security.
• Deploy CNAPP capabilities, security controls as code, Azure Policy, Terraform modules, CIS baselines, and automated remediation integrated with CI/CD.
• Conduct threat modelling, improve security detection, and automate compliance evidence for ISO 27001, GDPR, and DORA.
• Partner with cloud teams on security design reviews, paved-road patterns, documentation, office hours, and multi-cloud security alignment.

Requirements

• 8+ years of infrastructure or security engineering experience with production-scale Azure security expertise.
• Staff-level technical authority, cross-team influence, and the ability to lead through code, designs, reviews, and enablement.
• Strong experience with Entra ID, Defender for Cloud, Sentinel, Azure Policy, network security, Key Vault, and Terraform-based security controls.
• Experience with threat modelling, CNAPP or CSPM tooling, SIEM-based detection, observability platforms, and at least one additional cloud provider such as AWS or GCP.
• Practical implementation of security and compliance frameworks such as ISO 27001, GDPR, or DORA.
• Excellent technical communication in English is required.

Nice to have

• Fintech, banking, or regulated financial services experience.
• Okta and Entra ID federation security, post-acquisition integration, or on-premises and hybrid security experience.
• DORA, GCP security, supply chain security, or CI/CD pipeline security experience.
• Certifications such as AZ-500, SC-300, or AZ-305.

Culture & Benefits

• Senior individual contributor role focused on practical security enablement rather than standalone documentation.
• Cross-functional collaboration with Azure, AWS, GCP, platform, and IT teams.
• Pragmatic approach focused on making secure paths easy for engineering teams to adopt.
• Multicultural environment across European locations.

Hiring process

• Recruiter screen with Talent Acquisition.
• Hiring manager, case, and stakeholder interviews.
• Personality assessment.