Cloud Security Engineer v Czech Republic

Job offer

Become a part of the worldwide movement Doctors Without Borders (Médecins Sans Frontières)!

The humanitarian and medical organisation, Doctors without borders, opened a Shared IT Service (SITS) centre in Prague in 2019. This centre provides IT support to all interested parties around the world – people sent to missions, operating centres, sections and branch offices.

The Cloud Security Engineer is a hands-on role responsible forimplementing and operating the security posture of the group's cloud estate - identity, endpoint, cloud workloads, data - and closing posture-management findings. The role partners with IT Operations on landing-zone design and with the Security Architect on translating ADRs into deployed controls.

This is a build-and-run role, responsible for writing Infrastructure-as-Code, deploying access policies, tuning compliance baselines and delivering audit evidence.

This position reports to the Detection and Response Lead.

Responsibilities

• Harden cloud subscriptions and the productivity tenant against CIS benchmarks and a documented internal baseline
• Triage and close cloud security posture management recommendations; track exceptions and risk acceptances
• Operate conditional access, privileged identity management, and identity-protection policies; tune for false-positive rate
• Deploy and maintain endpoint compliance policies, security baselines, and patch automation across the managed fleet
• Implement attack-surface-reduction rules and manage their audit-to-block lifecycle
• Review Infrastructure-as-Code (Terraform / Bicep / equivalent) for security; rotate keys; enforce secret hygiene
• Provide evidence for NIS2 audits - control state, configuration history, exception register
• Work with the Security Architect to turn approved designs (ADRs) into deployed, working controls; give feedback when a design needs adjustment in practicePartner with the SOC: onboard new data sources; respond to control-related findings from incidents

Requirements

• 4+ years in cloud security engineering on a major cloud stack
• Hands-on depth in cloud identity (incl. conditional access, PIM), endpoint management, cloud security posture management, and CIS benchmark application
• Comfort with Infrastructure-as-Code (Terraform, Bicep, or equivalent) and at least one scripting language (PowerShell, Python)
• Demonstrable experience closing security posture findings at scale, with measured posture-score improvement
• Practical understanding of NIS2 obligations or an equivalent regulatory regime
• English at min B2 level
• Methodical and detail-oriented; tracks exceptions and evidence rigorously
• Automation-minded; reaches for code over click-ops
• Good documentation habits; leaves an audit trail others can follow
• Collaborative; partners well with IT Operations and the Architect

Adherence to MSF principles
Adherance to MSF Behavioural Commitments

Nice to have

• Recognised cloud security certification (cloud stack of choice; CCSP or equivalent also valued)
• Experience operating in an MSP/MSSP serving multiple legal entities
• Familiarity with Czech Cyber Act reporting obligations

What we can offer you

• Interesting professional and personal challenge
• Rewarding and meaningful work in a young, dynamic, and rapidly growing truly international organization
• Full flexibility and ownership/accountability
• 25 days of holiday per year; 6 sick days per year
• Flexible working hours, working from home
• Possibility to receive the 13th salary (after probation period)
• Meal vouchers
• Cafeteria / Pension scheme
• MultiSport card
• Language courses
• Transportation allowance: 10 CZK/calendar day
• Relocation package for former MSF field employees who change their regular domicile location in order to work in MSF SITS Prague office
• Possibility to go for a "sabbatical leave“ / mission, once per 3 years
• Free refreshment at the workplace
• Dog/baby friendly office, etc.
• Team buildings / family days

Who we are

Médecins Sans Frontières (MSF) / Doctors Without Borders is an international, independent, medical humanitarian organisation that delivers emergency aid to people affected by armed conflict, epidemics, natural disasters, and healthcare exclusion. MSF offers assistance to people in need and irrespective of race, religion, gender, or political affiliation. MSF’s actions are guided by medical ethics and the principles of impartiality, independence, and neutrality. Over 90% of the organization’s funding comes from individual private donors giving small amounts.

The organisation was founded in 1971 in France by a group of doctors and journalists in the wake of war and famine in Biafra, Nigeria. Their aim was to establish an independent organization that focuses on delivering emergency medicine aid quickly, effectively and impartially. Three hundred volunteers made up the organization when it was founded: doctors, nurses and other staff, including the 13 founding doctors and journalists.

Today, MSF is a worldwide movement of more than 65,000 people working in 21 sections, 12 branch offices, 5 Operational Centres and three supply centres worldwide. There are as many IT departments as sections, and together they support more than 32,000 system users spread over MSF offices and missions across the globe. To gain in efficiency and improve end-user experience, MSF has built its own Shared IT Services (SITS) Centre in Prague.