> Markdown version of [/jobs/ext/44762-security-architect-cloud-security-engineer-part-time-50](https://www.wearedevelopers.com/jobs/ext/44762-security-architect-cloud-security-engineer-part-time-50). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architect / Cloud Security Engineer (Part Time 50%)

- **Company:** Grupo Digital
- **Location:** Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Artificial Intelligence, Amazon Web Services, Cloud Computing, Cloud Computing Security, Identity and Access Management, Security Information and Event Management, Istio, Amazon Virtual Private Cloud (VPC), Kubernetes, Hashicorp, Linkerd (Service Mesh), Devsecops, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** May 15, 2026
- **Apply:** https://es.indeed.com/viewjob?jk=a3964c5cc60d407d

## About the Role

* Más de 6 años de experiencia en seguridad cloud y/o DevSecOps
 * Experiencia avanzada con AWS Secrets Manager, Parameter Store y HashiCorp Vault
 * Conocimiento sólido en Kubernetes Security: NetworkPolicies, Kyverno, OPA, Cilium
 * Experiencia con IAM, SCPs, multi-account AWS Organizations y blast-radius isolation
 * Dominio de redes cloud: VPC, TGW, Security Groups, NACL, PrivateLink, ALB/NLB
 * Experiencia con Service Mesh (Istio o Linkerd) y mTLS
 * Conocimientos avanzados de criptografía y TLS 1.2/1.3
 * Experiencia en pipelines DevSecOps: SAST, DAST, SCA, tfsec, Checkov
 * Conocimiento de compliance y evidencias automatizadas: CIS, ISO27001, SOC2
 * Experiencia con SIEM y respuesta a incidentes
 * Residencia actual en España

Deseable

 * Experiencia en entornos financieros o altamente regulados
 * Conocimientos en STRIDE y threat modeling avanzado
 * Certificaciones AWS Security, CKA/CKS o HashiCorp Vault
 * Nivel medio de inglés

## Description

Trabajarás en la definición e implementación de arquitecturas seguras, automatización de compliance y hardening en ecosistemas Kubernetes y AWS de gran escala., * Diseñar e implementar soluciones de gestión de secretos y cifrado end-to-end

 * Definir estrategias de aislamiento de entornos y microsegmentación
 * Implementar políticas zero-trust en entornos cloud multi-tenant
 * Automatizar guardrails, compliance y evidencias de seguridad
 * Diseñar controles de acceso y arquitecturas seguras en AWS y Kubernetes
 * Implementar y securizar service mesh con mTLS
 * Participar en threat modeling, incident response y hardening CIS
 * Colaborar con equipos DevSecOps y arquitectura cloud


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control)
- [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Securing Secrets in the GitOps era](https://www.wearedevelopers.com/videos/546-securing-secrets-in-the-gitops-era)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)