Cloud Security Engineer

About the role

AXA GBS Morocco is looking for a Cloud Security Engineer to lead operational security for its public cloud platforms. The role acts as the local Cloud Broker reference, ensuring the security of Azure and AWS environments while supporting a hybrid work model in Rabat.

Key responsibilities

• Define, review and evolve cloud security mandates, governance and operating models across AXA groups.
• Assess and approve security‑related changes, upgrades and compliance requirements for public cloud components.
• Implement continuous security assurance plans and integrate security‑by‑design into CI/CD and Infrastructure‑as‑Code pipelines.
• Coordinate with cloud product teams to consolidate security reports and ensure remediation of vulnerabilities.
• Lead FinOps initiatives that align cost optimisation with security posture.
• Organise security audits, incident management and recertification activities across markets.

Required profile

• Bachelor’s degree in Computer Science, Engineering or related field (Master’s in Information Security is a plus).
• 4+ years of operational security experience on public cloud providers (Azure and/or AWS).
• Strong communication skills in English (mandatory) and French (optional).
• Ability to work in a matrix organisation and manage cross‑functional security projects.

Required skills

• Azure cloud platform
• AWS cloud platform
• CI/CD pipelines
• Infrastructure as Code (IaC)
• SecOps and DevSecOps practices
• Secure Development Life Cycle (SDLC)
• FinOps cost‑optimisation concepts
• Security incident management