Senior Infrastructure and Cloud Security Engineer
On-siteCopenhagen, Capital Region, Denmark
Copenhagen, Capital Region, DenmarkOn-siteFull TimeSenior LevelMedium
Full TimeSenior LevelMedium
Job Summary
Design office and data center networks, VPN connectivity, and firewall configurations while partnering with owning teams on reviews and tooling. Build automation for workforce identity, SSO hygiene, and MFA enforcement, then hand patterns to long-term owners with documented transition plans. Create automated checks for cloud configuration drift and network rule anomalies, acting on findings from external penetration tests to drive remediation. Partner with GRC to establish auditable evidence pipelines for IT controls and conduct weekly office hours for cross-team network and access reviews.
Required Qualifications
- Solid IT fundamentals: networking, identity, endpoint posture, MFA, and SSO at production scale
- Cloud infrastructure experience: hands-on work on at least one of GCP or AWS, including IAM, networking, and basic Terraform-style IaC
- Workforce identity and access: hands-on experience with SSO and identity providers (Okta, Google Workspace) and clean joiner, mover, and leaver flows
- A security mindset layered on that IT and cloud depth: you instinctively look for misconfigurations, drift, and bad access patterns, without needing to be a dedicated security specialist
- Cross-context comfort: you can work on an office network problem and a product cloud problem in the same week without context-switching pain
- Platform-as-product mindset: you've built internal tooling that real teams adopt, with guard rails built into the tools people already use and manual review as a last resort, and you gathered feedback and measured impact
- Comfort handing work back to a long-term owner once the build phase is done
- Collaboration: you work through discussion and feedback, share context effectively, and write things down
- Several years of experience at the intersection of IT, cloud, and security
Desired Qualifications
- Nice to have: VPN solutions at scale (Tailscale, Cloudflare Access, WireGuard)
- Nice to have: endpoint management tooling
- Nice to have: audit log pipelines
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.