Cloud Foundation Engineer

We're looking for aSenior Cloud Foundation Engineer to join our team in Malaga, Spain in a hybrid working mode. In this role, you will own the design and implementation of critical cloud foundation services, ensuring secure governance, access controls and platform reliability for enterprise-scale infrastructure. You will work on core cloud governance challenges such as IAM policy architecture, multi-tenant isolation and service connectivity — not just CI/CD tooling — while enabling rapid, safe innovation in high-stakes financial environments.

Join a strategic engineering function tasked with building secure, scalable and resilient cloud foundations for one of the most sophisticated financial platforms in the world. You’ll influence control-plane decisions that define how the entire organization consumes cloud services.

Responsibilities

• Design and enforce IAM policies and least-privilege access frameworks across multi-account or multi-project environments
• Ownership of cloud governance models and platform security boundaries to support multi-team environments at scale
• Architect and implement multi-tenant isolation mechanisms, private networking and secure connectivity patterns
• Develop production-grade solutions in Python, applying best practices for system design, modularity and error handling
• Diagnose and resolve business-critical issues during on-call rotations, ensuring system resilience and reliability
• Collaborate with security, infrastructure and application teams to maintain alignment with regulatory and compliance standards
• Drive automation and tooling for governance, policy validation and access control enforcement
• Continuously assess platform maturity and recommend improvements to strengthen security and reduce risk

Requirements

• Demonstrated experience owning enterprise-scale cloud infrastructure governance (IAM, control-plane design, security boundaries) — not limited to consuming services
• Hands-on proficiency in cloud foundations for at least one major provider (Azure, AWS, or equivalent), including IAM/authentication design and enforcement, multi-tenant isolation and account/project governance, and networking design (private endpoints, routing, service connectivity)
• Proven production-level coding skills in Python (beyond scripting), with strong knowledge in modular system architecture and error handling
• Previous exposure to enterprise-scale infrastructure systems or software platforms, ideally in regulated industries
• Strong analytical, problem-solving and strategic thinking skills
• Ability to act as an escalation point for urgent issues and rapidly implement secure solutions

Nice to have

• Multi-cloud governance experience across Azure and AWS
• Familiarity with compliance frameworks and their application within cloud foundations
• Previous experience defining security and access governance for financial or mission-critical systems
• Expertise in infrastructure policy automation tooling