Azure Cloud Operations Engineer

About Graitec Group

Graitec is a global leader in Building Information Modeling (BIM) solutions, designing and developing software

that helps architects, engineers, and manufacturers design smarter and better. With over 30 years of innovation

and an entrepreneurial spirit, we’ve tripled our revenue in just five years.

Our North Star is clear — accelerate the digital transformation of the AECO industry and model the future. We

achieve this by growing our recurring revenue through innovative software and services that drive adoption,

integration, and lasting value for our customers.

Our 800 experts across 30+ offices in 12 countries support more than 270,000 users worldwide. As a global

Autodesk Platinum Partner, we combine world-class partnerships with our own cutting-edge software and

services to drive performance and sustainability across the industry.

At Graitec, we move fast and think big. We collaborate across teams and borders, embrace diversity, and

challenge ourselves to innovate every day. We believe in doing the right thing, breaking down silos, and making

an impact together.

How we work: Growth, Agility, Innovation, Responsibility

How we behave: Ambition, Engagement, One Graitec, Positive Energy

Learn more about the Graitec Group: graitec-group.com/graitec-a-global-player

About the Team Hiring

Our R&D division is a diverse, multicultural team of experienced professionals, all driven by a shared commitment to delivering technical excellence. The R&D team operates across Romania, France, the UK, Canada, the Czech Republic, Germany, and Poland, in close collaboration with our Product Management team to create industry-leading solutions for the AEC sector.

GRAITEC fosters a rewarding work environment that values continuous learning, personal initiative, and the freedom to contribute innovative ideas to support company success.

Overview

We are seeking a skilled Cloud Operations Engineer (Security Focus) with strong expertise in Microsoft Azure and solid foundations in system administration. In this role, you will design, secure, and operate cloud infrastructures while embedding security practices across all layers of our environments.

As part of our modernization initiatives within the AEC industry, you will ensure that our cloud and hybrid infrastructure is scalable, performant, and resilient against evolving cyber threats.

You will collaborate closely with R&D, Product Management, IT, and Security teams to enforce enterprise-grade standards for compliance, monitoring, and security automation across cloud and hybrid systems.

Key Responsibilities

• Design, implement, and operate secure Azure cloud infrastructure, ensuring compliance, scalability, and resilience.
• Collaborate with Security, Development, and DevOps teams to embed security controls into infrastructure design and CI/CD pipelines.
• Implement cloud security best practices, including:
• Identity and Access Management (IAM) governance
• Encryption (at rest and in transit)
• Vulnerability management
• Network segmentation
• Zero Trust access models
• Integrate and manage security monitoring and detection tools such as:
• Microsoft Defender for Cloud
• Azure Security Center
• Microsoft Sentinel
• (Optional) AWS GuardDuty
• Automate security and infrastructure operations using Terraform, Ansible, and scripting languages (Python, PowerShell, Bash).
• Support incident response and forensic investigations across cloud and hybrid environments.
• Ensure compliance with industry standards and regulations (e.g. ISO 27001, SOC 2, GDPR) and implement auditing and logging frameworks.
• Support legacy-to-cloud and hybrid migrations, ensuring security baselines are maintained throughout transitions.
• Provide technical guidance on securing AEC-specific applications (e.g. BIM, CAD) running in cloud or hybrid environments.

Key Metrics

• Security Posture: Reduction in vulnerabilities and improved compliance scores.
• Incident Response: Faster detection, response, and remediation of security incidents.
• Access Control: Effective enforcement of least privilege and zero-trust principles.
• Cost & Performance: Secure optimization of cloud costs without compromising security.
• Resilience: Cloud and hybrid environments resistant to security incidents and outages.

Responsibilities

• 3–5 years of experience managing Azure and hybrid environments.
• 2+ years in a security-focused cloud or infrastructure role.
• Strong knowledge of cloud security principles, including:
• IAM
• Encryption
• Vulnerability management
• Firewalls and network security
• SIEM / SOAR concepts
• Experience integrating security controls into CI/CD pipelines.
• Proficiency in scripting and automation (Python, PowerShell, Bash).
• Familiarity with incident response frameworks and security standards.
• Strong collaboration skills across IT, Security, and Development teams.
• Fluent in English, with the ability to clearly document security and compliance processes.

Nice to Have

• Hands-on experience with Microsoft Sentinel, Defender for Cloud, or other SIEM / SOAR platforms.
• Knowledge of Kubernetes security.
• Exposure to multi-cloud security environments (Azure + AWS).
• Familiarity with AEC industry software and related security considerations.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or a related field.
• Azure Certifications

Interview Process

At Graitec, we’re proud to foster a diverse and inclusive workplace.

We value our employees for who they are and the contributions they bring, encouraging everyone to be their

authentic selves at work. This diversity helps us better serve the wide range of customers and markets we

operate in. We welcome applications from all backgrounds and assess candidates solely on their skills and ability

to succeed in the role.

Graitec uses AI to support and streamline internal processes; however, all application reviews, screening, and

hiring decisions are made solely by our Talent Acquisition team and hiring managers.

HR Screening – An initial “get to know you” discussion.

• HR Screening – An initial “get to know you” discussion.
• Technical Interview
• Hiring Manager Interview – Role-specific discussion with the manager
• Final Interview