Cloud Security Consultant (Azure/AWS/GCP)

Location: Bucharest, Romania

Company

Work within the EQUANS IT department's Cyber Customer Trust team, supporting business units in delivering secure customer solutions.

What you will do

• Assess the cybersecurity of cloud, hybrid, and on-premises architectures across Azure, AWS, and GCP.
• Prepare independent security assessment reports, recommendations, remediation tracking, and architecture review board submissions.
• Define and continuously improve cloud security guidelines, policies, frameworks, and standardized security solutions.
• Review cloud-native development practices, CI/CD pipelines, infrastructure-as-code configurations, and deployment patterns.
• Support local cyber teams and participate in bid, design, and acceptance phases of projects.
• Maintain catalogs of cyber solutions and partners and monitor relevant technology and regulatory developments, including NIS2 and the Cyber Resilience Act.

Requirements

• Engineering degree in cybersecurity or master's degree in computer science and networks, plus 5+ years of experience in cloud security and security architecture within complex enterprise environments.
• Expertise in reviewing systems; relevant certifications such as CISSP, CCSP, TOGAF Practitioner, Microsoft Azure Security, or AWS Security Specialty are desirable.
• Experience with Identity and Access Management, Zero Trust, Entra ID/Azure AD, key management and PKI, CSPM, container security, Kubernetes, infrastructure as code, security monitoring, API security, and cloud security fundamentals across Azure, AWS, and GCP.
• Knowledge of threat modeling, including STRIDE, and trust boundary analysis.
• Understanding of client business challenges and the ability to act as a consultant for the internal business.
• Knowledge of security information frameworks and risk management, including NIST CSF, ISO 27001/2, CSA CCM, CIS Controls, ISO 27005, and EBIOS RM.
• Comfort working in decentralized, multicultural organizations with heterogeneous cybersecurity and architecture maturity levels.
• Autonomous, energetic, proactive, communicative, relationship-oriented, ethical, and discreet.
• Fluent English required; French is optional.

Nice to have

• Certifications from major cloud architecture security solution providers.
• Familiarity with OT/ICS security concepts, including IEC 62443.
• French language skills.

Culture & Benefits

• Work in a decentralized and multicultural organization supporting business units across different countries.
• Collaborate with the Cyber Customer Trust director, Global CISO, Head of Cyber Design Office, Cyber Technical Office, and local cyber teams.
• Employment contract: CDI.