InfoSec Architecture/Cloud Specialist About you RHI Magnesita is currently seeking an InfoSec Architecture/Cloud Specialist to bring strong technical expertise and hands-on experience to help us continuously improve our security posture across cloud platforms. This specialist-level role offers the opportunity to act as the subject matter expert for cloud security within RHI Magnesita’s InfoSec Architecture Team, shaping secure architectures and guiding best practices across the organization. <ul style="margin-bottom:0.0cm;margin-top:0.0px"> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Your passion is working in global teams and global projects.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">You appreciate a lively working environment and you are happy to be part of a highly motivated team.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">With your strong and analytical skills, you support different stakeholders in an ever-changing environment.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">You are excited by working on an agile environment and delivering constant value to your customers.</li> <li style="margin:0.0cm 0.0cm 8.0pt 48.4px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Feel motivated to work alongside leadership within our organization.</li> </ul> In addition, you have: Education & Experience <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Cloud Engineering, or a related technical field or equivalent education/experience.</li> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Solid experience in information security, with a focus on cloud security across Azure and AWS.</li> </ul> Technical Skills <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Azure security stack: Azure AD, Defender, Key Vault, Purview, Azure Policy</li> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">AWS security stack: IAM, GuardDuty, Inspector, Security Hub, KMS, Control Tower </li> </ul> Hands-on experience with: <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Terraform, Bicep, ARM templates or other IaC frameworks</li> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Container and orchestration security (e.g., Kubernetes…)</li> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Familiarity with multi-cloud environments, hybrid deployments, and secure connectivity models (VPN, ExpressRoute…).</li> </ul> Certifications (Preferred) <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Microsoft Certified: Azure Security Engineer Associate</li> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">AWS Certified Security – Specialty</li> </ul> Soft Skills <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Strong analytical mindset and risk-based decision-making approach.</li> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Clear and confident communicator who can influence architecture decisions across business units.</li> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Comfortable working in high-velocity DevOps and agile environments with strong documentation and follow-up.</li> <li style="margin:0.0cm 0.0cm 0.0cm 47.6px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Fluent in English</li> </ul> About the job As a Global Cloud Security Specialist, you will play a critical role in safeguarding RHI Magnesita’s cloud infrastructure and services across Microsoft Azure and Amazon Web Services (AWS). You will work cross-functionally to architect, implement, and operate modern cloud security controls that protect sensitive data, workloads, identities, and integrations in a scalable, automated, and resilient manner. This role requires deep technical expertise in Azure and AWS security architectures, hands-on experience with cloud-native security tools, and an ability to integrate security into agile DevOps environments. You will shape our global cloud security posture and lead initiatives that align with zero trust principles, regulatory requirements, and evolving threat models. Key Responsibilities: 1. Cloud Security Architecture & Engineering <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Design and implement secure cloud architectures for IaaS, PaaS, and SaaS environments in Azure and AWS, aligning with zero trust and defense-in-depth models.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Integrate security into CI/CD pipelines, infrastructure-as-code (IaC), and cloud-native development lifecycles.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Collaborate with application and infrastructure teams to secure workload deployments, container platforms, and serverless services.</li> </ul> 2. Identity & Access Management (IAM) <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Define and enforce least-privilege access models, role-based access control (RBAC), and just-in-time (JIT) access in Azure AD and AWS IAM.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Configure and monitor Conditional Access, Privileged Identity Management (PIM), and federation mechanisms.</li> </ul> 3. Threat Detection & Response <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Operate and fine-tune cloud-native security services</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Define and maintain security alerts, log forwarding, and custom detection rules across both cloud environments.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Support incident response workflows involving cloud assets, data breaches, or misconfigurations.</li> </ul> 4. Cloud Posture & Compliance Management <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Continuously monitor and improve cloud security posture using tools like Microsoft Purview, Azure Policy, AWS Config, and third-party CSPM tools.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Map and enforce controls aligned to ISO 27001, NIST 800-53, CIS Benchmarks, GDPR, LGPD, and customer-specific requirements.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Support audits and due diligence with structured evidence from cloud environments.</li> </ul> 5. Collaboration, Governance & Enablement <ul style="margin-top:0.0cm;margin-bottom:0.0cm"> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Act as the trusted security partner for the CCoE, platform owners, architects, and DevOps teams.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Maintain and update cloud security baselines, patterns, and guidelines.</li> <li style="margin:0.0cm 0.0cm 0.0cm 48.4px;line-height:normal;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">Conduct training and awareness for developers, cloud administrators, and business units on secure cloud usage. </li> </ul> What we bring to the table We are the acknowledged industry leader in innovative technology. Our company is defined by people. That’s why we attach so much importance to our employees. We have a collaborative culture that cherishes ideas and determination to add value for our customers. Our leadership style encourages openness, fresh thinking and initiative. We are pragmatic, positive and optimistic. <a name="_Hlk5359103"></a>As a much-valued employer: <ul style="margin-bottom:0.0cm;margin-top:0.0px"> <li style="margin:0.0cm 0.0cm 0.0cm 23.6px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">We offer you a varied and challenging role within the world market leader that is driving positive change</li> <li style="margin:0.0cm 0.0cm 0.0cm 23.6px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">We give you the opportunity to take part in shaping the future of the industry leader in innovative technology Empowerment to take responsibility and force your own career success</li> <li style="margin:0.0cm 0.0cm 0.0cm 23.6px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">You will have the opportunity to learn, to lead and to build something new with colleagues from around the world</li> <li style="margin:0.0cm 0.0cm 0.0cm 23.6px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">We attach importance to a respectful and cherishing environment with open decision-making processes</li> <li style="margin:0.0cm 0.0cm 8.0pt 23.6px;line-height:115%;font-size:12.0pt;font-family:Aptos, sans-serif;text-indent:0.4px">We promote direct communication, openness and collaboration with our award-winning and innovative employee app</li> </ul> About RHI Magnesita We are the acknowledged technology leader in the refractory industry. Our company is defined by people. We are committed to diversity and know that multiple approaches, perspectives and backgrounds fuel creativity and innovation. It is our aspiration to build a workplace culture where everyone feels valued, engages, and can enjoy a truly inclusive environment and the diverse voices of our employees are heard. We foster a collaborative culture that cherishes ideas and determination to add value for our customers. Our leadership style encourages open-mindedness,reliability, pragmatism, and innovation. Find & follow us: <a>www.rhimagnesita.com</a> <a>LinkedIn</a>, <a>Facebook</a>, <a>Instagram</a>, <a>YouTube</a>

InfoSec Architecture/Cloud Specialist (Contagem, BR, 32210-050) @ RHI Magnesita GmbH

About this role

Ready to apply?