Ai-Driven Sre

ppDescrição do cargo /p pSite Reliability Engineer (Security Identity) m/f - Hybrid (Lisbon) Sysmatch is a Portuguese company that has been on the IT market for almost 20 years.
/p pOur core business is IT Outsourcing and Software Development for the finance sector.
/p pWe invest a lot of effort on our client relationships and always deliver the best candidate or product available for their need and that is the main reason behind our success
/p pAt the moment we are looking for the following candidate: Site Reliability Engineer (Security Identity) m/f – Hybrid (Lisbon) – Goals and deliverables: Security Platform Reliability – Ensure availability, stability, and security of Public Cloud services with a focus on identity layers.
/p ul liDeliver secure-by-design cloud operations aligned with corporate security frameworks and approved architectures.
/li liAct as a senior technical reference for security and identity reliability within the Cloud Services Platform Reliability team.
Vulnerability Patch Management- Deliver and maintain end to end vulnerability remediation across Windows and Linux cloud workloads.
/li liOperate WSUS and Red Hat Satellite as authoritative patching platforms and ensure consistent execution at scale.
/li liProduce regular patching compliance reports, including risk exposure, SLA breaches, and remediation status.
/li liEnsure patching baselines align with corporate security policies while minimizing service disruption.
Identity Access Management (AD / Entra ID)- Ensure secure operation of Active Directory and Entra ID environments according to IAM and security directives.
/li liOperationalizae the enforcement of least privilege access, RBAC, and Privileged Identity Management (PIM) across admin, service, and workload identities.
/li liDeliver periodic access reviews, audit evidence, and remediation actions for privileged access.
/li liMaintain compliant Active Directory OU structures, GPOs, delegation models, and admin separation.
Security Controls Compliance- Implement and validate cloud security controls in line with minimum security requirements and hardening standards.
/li liEnsure cloud services comply with approved security architectures and governance rules.
/li liSupport security assessments, audits, and risk analyses for both new and existing cloud services.
/li liDrive remediation of non conformities and residual risks in coordination with security governance teams.
/li liEnsure mandatory security tooling (EDR, vulnerability scanning, logging, inventory agents) is deployed, operational, and monitored at scale.
/li liDeliver accurate security KPIs and dashboards covering coverage, health, and compliance of security agents.
/li liMaintain alignment between cloud assets and CMDB / inventory systems.
/li liContribute to automation and standardization of security tooling integration.
/li liAct as a technical escalation point during cloud security or identity related incidents.
/li liCoordinate containment, remediation, and recovery actions with SOC, Cloud Security, IAM, and platform teams when engaged.
/li liCoordinate the build of incident post mortems, root cause analyses, and improvement actions.
/li liEnsure controlled execution of standard cloud changes aligned with operational and security requirements.
/li liDrive automation and Infrastructure as Code practices to enforce security and identity controls consistently.
/li /ul ul liSalary classification according to the experience shown; /li liGood working environment with young and dynamic teams; /li liIntegrationintoexciting and technologically innovative projects; /li liTraining plan andopportunitiesAnnual Gross Salary: **€ - **€ + Other Benefits /li /ul /p #J-*-Ljbffr