Job offer

Become a part of the worldwide movement Doctors Without Borders (Médecins Sans Frontières)!

The humanitarian and medical organisation, Doctors without borders, opened a Shared IT Service (SITS) centre in Prague in 2019. This centre provides IT support to all interested parties around the world – people sent to missions, operating centres, sections and branch offices.

The Cloud Security Engineer is a hands-on role responsible forimplementing and operating the security posture of the group's cloud estate - identity, endpoint, cloud workloads, data - and closing posture-management findings. The role partners with IT Operations on landing-zone design and with the Security Architect on translating ADRs into deployed controls.

This is a build-and-run role, responsible for writing Infrastructure-as-Code, deploying access policies, tuning compliance baselines and delivering audit evidence.

This position reports to the Detection and Response Lead.

Responsibilities

Harden cloud subscriptions and the productivity tenant against CIS benchmarks and a documented internal baseline
Triage and close cloud security posture management recommendations; track exceptions and risk acceptances
Operate conditional access, privileged identity management, and identity-protection policies; tune for false-positive rate
Deploy and maintain endpoint compliance policies, security baselines, and patch automation across the managed fleet
Implement attack-surface-reduction rules and manage their audit-to-block lifecycle
Review Infrastructure-as-Code (Terraform / Bicep / equivalent) for security; rotate keys; enforce secret hygiene
Provide evidence for NIS2 audits - control state, configuration history, exception register
Work with the Security Architect to turn approved designs (ADRs) into deployed, working controls; give feedback when a design needs adjustment in practicePartner with the SOC: onboard new data sources; respond to control-related findings from incidents

Requirements

4+ years in cloud security engineering on a major cloud stack
Hands-on depth in cloud identity (incl. conditional access, PIM), endpoint management, cloud security posture management, and CIS benchmark application
Comfort with Infrastructure-as-Code (Terraform, Bicep, or equivalent) and at least one scripting language (PowerShell, Python)
Demonstrable experience closing security posture findings at scale, with measured posture-score improvement
Practical understanding of NIS2 obligations or an equivalent regulatory regime
English at min B2 level
Methodical and detail-oriented; tracks exceptions and evidence rigorously
Automation-minded; reaches for code over click-ops
Good documentation habits; leaves an audit trail others can follow
Collaborative; partners well with IT Operations and the Architect

Adherence to MSF principles
Adherance to MSF Behavioural Commitments

Nice to have

Recognised cloud security certification (cloud stack of choice; CCSP or equivalent also valued)
Experience operating in an MSP/MSSP serving multiple legal entities
Familiarity with Czech Cyber Act reporting obligations

What we can offer you

Interesting professional and personal challenge
Rewarding and meaningful work in a young, dynamic, and rapidly growing truly international organization
Full flexibility and ownership/accountability
25 days of holiday per year; 6 sick days per year
Flexible working hours, working from home
Possibility to receive the 13th salary (after probation period)
Meal vouchers
Cafeteria / Pension scheme
MultiSport card
Language courses
Transportation allowance: 10 CZK/calendar day
Relocation package for former MSF field employees who change their regular domicile location in order to work in MSF SITS Prague office
Possibility to go for a "sabbatical leave“ / mission, once per 3 years
Free refreshment at the workplace
Dog/baby friendly office, etc.
Team buildings / family days

Who we are

Médecins Sans Frontières (MSF) / Doctors Without Borders is an international, independent, medical humanitarian organisation that delivers emergency aid to people affected by armed conflict, epidemics, natural disasters, and healthcare exclusion. MSF offers assistance to people in need and irrespective of race, religion, gender, or political affiliation. MSF’s actions are guided by medical ethics and the principles of impartiality, independence, and neutrality. Over 90% of the organization’s funding comes from individual private donors giving small amounts.

The organisation was founded in 1971 in France by a group of doctors and journalists in the wake of war and famine in Biafra, Nigeria. Their aim was to establish an independent organization that focuses on delivering emergency medicine aid quickly, effectively and impartially. Three hundred volunteers made up the organization when it was founded: doctors, nurses and other staff, including the 13 founding doctors and journalists.

Today, MSF is a worldwide movement of more than 65,000 people working in 21 sections, 12 branch offices, 5 Operational Centres and three supply centres worldwide. There are as many IT departments as sections, and together they support more than 32,000 system users spread over MSF offices and missions across the globe. To gain in efficiency and improve end-user experience, MSF has built its own Shared IT Services (SITS) Centre in Prague.

Cloud Security Engineer

Začněte e-mailem