Senior Cloud Security Engineer

We are seeking a highly skilled Senior Cloud Security Engineer to take a lead role within our Cybersecurity Operations team. In this position, you will collaborate closely with Cloud Engineering and DevOps/SRE teams to deliver secure, automated, and scalable cloud environments across Azure and AWS. You will drive the maturity of our cloud security programme, shape secure engineering practices, and influence the protection of mission-critical SaaS services used globally. This role offers the opportunity to lead key security initiatives from design through to operational excellence. This high-impact role shapes the security of cloud platforms serving our global client base. You will influence architectural decisions, deliver automation at scale, and mature our cloud security programme.

About Intapp:

Intapp, based in Silicon Valley, is a leader in Vertical AI SaaS company, collaborating with over 2,550 professional and financial services firms globally. With 20+ years of industry expertise, Intapp's "Intelligence Applied" approach is transforming how businesses operate and leverages a strategic partner with Microsoft in delivering industry cloud solutions. The company culture promotes accountability, responsibility, and growth in a diverse, inclusive, and collaborative environment. Since going public in 2021, Intapp has expanded to over 1,600 employees globally with development centers in Palo Alto, Charlotte, Belfast, Berlin, and Lisbon.  

About Lisbon:

Intapp is excited to expand its Research & Development center in Lisbon, aiming to add 50 new team members in the next year. Lisbon’s tech ecosystem and vibrant community make it an ideal destination for engineers and tech professionals from around the world. The city's reputation for innovation aligns perfectly with Intapp’s mission to leverage AI and cloud-based solutions. Lisbon offers an ideal work-life balance and quality of life, making it an attractive city for top talent. Joining Intapp in Lisbon provides a unique opportunity to help shape the new flagship development center and contribute to high-impact projects in a thriving tech environment.

What You Will Do:

• Build and secure CI/CD pipelines using automated gates, policies, and integrated security controls.
• Manage and secure Infrastructure as Code (Terraform, ARM, Bicep, CloudFormation), ensuring governance and validation.
• Automate secrets and certificate lifecycle management using Azure Key Vault and AWS Secrets Manager.
• Develop scripts and automation to support secure pipeline operations, including WAF rule deployments.
• Implement and maintain cloud security controls such as WAF, firewalls, NSGs, and private endpoints.
• Assess and protect cloud infrastructure and SaaS services from unauthorised access and disruption.
• Continuously monitor and improve cloud security posture.
• Support secure branching strategies, repository governance, and reusable DevOps pipeline standards.
• Assess cybersecurity posture across Azure and AWS platforms.
• Support certification and compliance efforts.
• Ensure cloud security operations and maintenance processes are documented and aligned with policies.
• Stay informed on emerging cyber threats and adversary techniques.
• Develop and maintain security dashboards displaying KPIs and metrics.
• Deliver measurable improvements within the first 12 months, including secure CI/CD pipeline patterns, enhanced automation of secrets and certificate management, strengthened cloud security controls, and actionable security dashboards.

What You Will Need:

• 8+ years of experience in Information Security, Cybersecurity, or related IT disciplines.
• Proven senior-level Cloud Security Engineering experience.
• Strong Microsoft Azure experience; AWS experience beneficial.
• Proficiency with ARM, Bicep, Terraform, and CloudFormation.
• Experience with Azure DevOps (YAML and Classic pipelines).
• Experience with Kubernetes/EKS.
• Experience with encryption, hashing, and secrets lifecycle management.
• Strong scripting or programming capability.
• Experience working effectively within Agile/DevOps environments.
• At least one certification such as AZ-500, CCSP, CCSK, CISM, CISSP, or similar (preferred).
• Technical degree (preferred).
• Experience working within a SaaS provider environment (preferred).

What you will gain at Intapp:

Our culture at Intapp emphasizes accountability, responsibility, and growth.  We support each other in a positive, open atmosphere that fosters creativity, approachability, and teamwork. We’re committed to creating a modern work environment that’s connected yet flexible, supporting both professional success and work-life balance. In return for your passion, commitment, and collaborative approach, we offer:

- A state-of-the-art facility with a fully stocked kitchen – only a 2-minute walk to/from Gare do Oriente.

- A hybrid work system supporting agile and flexible hours.

- Attractive compensation – including competitive base pay and performance-based variable pay.

- Equity/Stock in Intapp.Opportunity to travel to other development centers for product training and cross-site collaboration.

- One-time home office stipend.

- Generous paid parental leave (including adoptive leave), marriage leave, bereavement leave, carer's leave, and paid sick days.

- Meal allowance.

- Reimbursement for training towards continuing education.

Intapp provides equal employment opportunities to all qualified applicants and will make hiring decisions without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristic protected by federal, state or local laws.

Please note: Intapp will not hire through text message, social media, or email alone. We will never extend a job offer unless you have been contacted directly by an Intapp recruiter and have participated in the interview process which will generally consist of 3 or more virtual or in person meetings. Please note that Intapp only uses company email addresses, which contain “@intapp.com” or “@dealcloud.com” to communicate with candidates via email. Intapp will never ask for financial information of any kind or for any payment during the job application process. We post all legitimate job openings on the Intapp Career Site at https://www.intapp.com/working-at-intapp/. If you believe you were a victim of such a scam, you may contact your local authorities. Intapp is not responsible for any claims, losses, damages, or expenses resulting from scammers.