Ai-Driven Sre

Descrição do cargo
Site Reliability Engineer (Security & Identity) m/f - Hybrid (Lisbon) Sysmatch is a Portuguese company that has been on the IT market for almost 20 years.
Our core business is IT Outsourcing and Software Development for the finance sector.
We invest a lot of effort on our client relationships and always deliver the best candidate or product available for their need and that is the main reason behind our success
At the moment we are looking for the following candidate: Site Reliability Engineer (Security & Identity) m/f – Hybrid (Lisbon) – Goals and deliverables: Security & Platform Reliability – Ensure availability, stability, and security of Public Cloud services with a focus on identity layers.
Deliver secure-by-design cloud operations aligned with corporate security frameworks and approved architectures.
Act as a senior technical reference for security and identity reliability within the Cloud Services Platform Reliability team.
Vulnerability & Patch Management- Deliver and maintain end to end vulnerability remediation across Windows and Linux cloud workloads.
Operate WSUS and Red Hat Satellite as authoritative patching platforms and ensure consistent execution at scale.
Produce regular patching compliance reports, including risk exposure, SLA breaches, and remediation status.
Ensure patching baselines align with corporate security policies while minimizing service disruption.
Identity & Access Management (AD / Entra ID)- Ensure secure operation of Active Directory and Entra ID environments according to IAM and security directives.
Operationalizae the enforcement of least privilege access, RBAC, and Privileged Identity Management (PIM) across admin, service, and workload identities.
Deliver periodic access reviews, audit evidence, and remediation actions for privileged access.
Maintain compliant Active Directory OU structures, GPOs, delegation models, and admin separation.
Security Controls & Compliance- Implement and validate cloud security controls in line with minimum security requirements and hardening standards.
Ensure cloud services comply with approved security architectures and governance rules.
Support security assessments, audits, and risk analyses for both new and existing cloud services.
Drive remediation of non conformities and residual risks in coordination with security governance teams.
Ensure mandatory security tooling (EDR, vulnerability scanning, logging, inventory agents) is deployed, operational, and monitored at scale.
Deliver accurate security KPIs and dashboards covering coverage, health, and compliance of security agents.
Maintain alignment between cloud assets and CMDB / inventory systems.
Contribute to automation and standardization of security tooling integration.
Act as a technical escalation point during cloud security or identity related incidents.
Coordinate containment, remediation, and recovery actions with SOC, Cloud Security, IAM, and platform teams when engaged.
Coordinate the build of incident post mortems, root cause analyses, and improvement actions.
Ensure controlled execution of standard cloud changes aligned with operational and security requirements.
Drive automation and Infrastructure as Code practices to enforce security and identity controls consistently.
Salary classification according to the experience shown;
Good working environment with young and dynamic teams;
Integrationintoexciting and technologically innovative projects;
Training planandopportunitiesAnnual Gross Salary: **€ - **€ + Other Benefits
#J-*-Ljbffr