Cloud & Data Security Engineer

About us: Amach is an industry-leading technology driven company with headquarters located in Dublin and remote teams in UK and Europe. Our blended teams of local and nearshore talent are optimised to deliver high quality and collaborative solutions. Founded in 2013, Amach was created to solve a specific problem in aviation: too much complexity, too little usable intelligence. We help airlines modernise their operating model using cloud, data and Al-delivered by teams with deep aviation domain expertise. Our goal is to maximize airlines' operational efficiency by optimizing resource use, reduce costs and increase customer experience and satisfaction. As a Cloud & Data Security Engineer within the Cyber Engineering & Architecture function, you will own the definition, governance and continuous improvement of our customer's cloud and data security posture. This is a hands-on role, responsible for security standards, architectures and control governance across cloud platforms and data environments, reducing exposure risk and ensuring secure-by-design foundations as the organisation scales its cloud footprint. You will own cyber controls implementation and management using cloud-native and data security tooling. In addition to deep expertise in cloud and data security, this role requires collaboration with the wider Cyber Engineering & Defence teams, contributing to cross-domain security architecture reviews, supporting incident remediation and root-cause improvements when needed. A genuine interest in how AI adoption intersects with security is a strong plus, as the function's remit continues to grow into this space. This is a hybrid role, so the successful candidate will be expected to attend the office in Dublin at least once a week. Required Experience: Experience in cloud security, security engineering, or infrastructure security roles Hands-on experience securing cloud environments (AWS, Azure, or GCP) - IAM, network security, encryption, workload protection Hands-on experience implementing data protection controls in Microsoft Purview or equivalent platforms Experience delivering control governance, remediation workflows and evidence-based reporting for cloud and data security non-compliances Experience collaborating with governance stakeholders (Data, Privacy, Legal, IT) on policy and control implementation Strong understanding of data protection concepts (classification, least privilege, encryption, DLP, secure sharing) and how they apply in modern cloud and collaboration environments Ability to translate risk into practical standards and secure-by-design blueprints for cloud and data use cases Strong analytical skills to interpret signals and drive risk-based remediation priorities Strong stakeholder management and communication skills, including the ability to explain control requirements to technical and non-technical audiences An interest in AI security considerations (e.g., data exposure risks in AI tooling, secure adoption patterns) - training and support will be provided to build this out further Key responsibilities & duties include: Own cloud and data security policies, standards and secure-by-design patterns for infrastructure, information protection and safe AI adoption Engineer, manage and govern cloud security and data protection controls (currently using Microsoft Purview) Operate and improve Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM) practices, using insights to prioritise remediation Define governance processes for cloud and data security non-compliances, exceptions and control gaps, coordinating remediation with technology and data owners Partner with Data, Privacy, Legal and IT stakeholders to ensure controls and processes meet regulatory and internal requirements Support incident response by providing SME input for cloud misconfigurations, data leakage events, or insider risk, and driving control improvements Provide security architecture reviews and guidance for cloud, data platform and analytics initiatives to ensure secure data flows and protection by design Contribute to security awareness and enablement for employees on safe handling of sensitive data and cloud resources Work with Cyber Defence to ensure relevant cloud and data protection events and telemetry are available for monitoring and response Support development of metrics and reporting on cloud and data security posture to track trends in maturity and controls effectiveness What’s in it for you: An opportunity to join a fast-growing company Options for career advancement Learning and development opportunities Flexible working environment Competitive salaries based on experience Equal Opportunity Employer: Amach is an equal opportunity employer and makes employment decisions on the basis of merit. We celebrate diversity and are committed to creating an inclusive environment for all employees. This job description is intended to convey essential responsibilities and qualifications for this role, but it is not an exhaustive list of tasks that an employee may be required to perform. If you are passionate about driving customer success, advising on strategic solutions, and contributing to product innovation, we would love to hear from you! Not for you? Check out all of our open positions in our careers page and follow us on LinkedIn for future opportunities. P.S. Share this with friends and co-workers! Don't be afraid they'll steal it from you, if you're amazing and smart we'll find a role for you. We are growing fast and we are always looking for talented people. At Amach, we strive to be an inclusive community of open-minded individuals with different backgrounds and we are committed to fostering, cultivating and preserving a culture of diversity, equity and inclusion. We strongly believe that a diversity of experience and background is essential to create a fulfilling environment and better solutions for our people and our customers. All Amach employees and contractors are expected to honour this policy and act to ensure that every individual is respected in the workplace. Your personal data Amach will process your personal information in accordance with the EU's General Data Protection Regulation (GDPR). We will comply with data protection law and principles, which means that your data will be: Used lawfully, fairly and in a transparent way Collected only for valid purposes and not used in any way that is incompatible with those purposes Relevant to the purposes we have told you about and limited only to those purposes Accurate and kept up to date Kept only as long as necessary for the purposes we have told you about Kept securely If you would like to contact us about your data, please use the following address: [email protected]