Lead Cloud Security Engineer

About the role

We are building a new security team for a digital bank and need a Lead Cloud Security Engineer to protect our Azure cloud platform and Kubernetes environments. You will ensure secure‑by‑default architecture, auditability and resilience in a regulated financial‑services setting.

Key responsibilities

• Design and operate secure Azure landing zones with network segmentation, private endpoints, Entra ID identity management, least‑privilege entitlement (CIEM) and Key Vault secret handling.
• Implement continuous cloud posture and workload protection using CNAPP/CSPM solutions such as Microsoft Defender for Cloud, Wiz, Orca or Prisma Cloud.
• Hardening of AKS clusters – RBAC, Pod Security Standards, OPA Gatekeeper/Kyverno admission control, network policies and namespace isolation.
• Secure the container supply chain through image scanning, signing, trusted registries and hardened base images.
• Integrate cloud, cluster and application signals into Microsoft Sentinel and support incident response together with detection teams.
• Collaborate on DORA, ICT risk, third‑party and penetration‑testing activities and communicate risk to engineering, leadership and auditors.

Required profile

• Hands‑on experience securing Azure environments in production, not just design reviews.
• Strong background in Kubernetes/AKS hardening, RBAC, Pod Security Standards and supply‑chain security.
• Proficiency with Infrastructure as Code and scripting (Python, PowerShell) to automate guardrails.
• Ability to convey technical risk to both technical and non‑technical stakeholders, including auditors.

Required skills

• Azure cloud security
• Kubernetes and Azure Kubernetes Service (AKS)
• Entra ID identity and access management
• CNAPP/CSPM tools (Microsoft Defender for Cloud, Wiz, Orca, Prisma Cloud)
• OPA Gatekeeper or Kyverno admission control
• Python and PowerShell scripting
• Microsoft Sentinel SIEM integration

What we offer

• Freedom to propose and implement ideas with managerial support.
• Competitive salary range €5,758‑€7,792 gross per month plus performance bonuses.
• Health insurance, pension scheme, extra days off, flexible working hours and modern infrastructure.
• Opportunity to shape the culture of a growing Lithuanian digital bank.