About the job
Enpal is working to build Europe's largest renewable energy community. The company offers rental services for solar systems, electricity storage, wall boxes, and smart meters, all managed through the Enpal One+ platform. With a focus on digital, decentralized, and fully renewable solutions, Enpal aims to scale quickly and address climate change head-on.
Role Overview
The Senior Cloud Security Engineer joins the CISO organization in Berlin (Design Office). This role focuses on translating ISO 27001, NIS2, and KRITIS requirements into practical steps, assessing systems, identifying compliance gaps, collecting evidence, and ensuring issues are resolved. The work spans Enpal's entire technology stack, including cloud infrastructure, identity management, endpoints, applications, and various platforms.
This is a hands-on position. The engineer will collaborate with IT and CTO teams, review configurations, challenge architectural choices, and use AI tools to improve efficiency. The role is deeply involved in implementation, not just governance.
Enpal values agility and offers opportunities for career growth. Security, engineering, and product teams work closely to support the mission of making solar energy accessible and sustainable. The Senior Cloud Security Engineer will help build the compliance framework that keeps Enpal resilient and trusted.
What You Will Do
- Create Secure Solutions: Deliver incremental improvements with each iteration, focusing on user experience and climate goals. Apply Shift-Left and Zero-Trust principles across all units.
- Translate Regulations into Action: Break down ISO 27001, NIS2/BSIG, and KRITIS requirements into prioritized tasks. Develop solutions or coordinate with CTO and IT teams to implement them.
- Evaluate Technology Stack for Compliance: Conduct hands-on assessments of Azure, Entra ID, M365, Intune, Defender XDR, AKS, Terraform, CI/CD pipelines, Datawarehouse, and other platforms. Identify where current practices differ from regulatory standards.
- Build Resilience Against Threats: Strengthen Enpal's ability to mitigate and respond to security threats, keeping systems secure and reliable.

