Cloud & DevSecOps Architect (gn)

Role overview Define and embed security standards for cloud platforms, infrastructure, and software delivery. You will guide engineering and platform teams through architecture decisions and reviews, while helping build reusable controls that make secure practices part of everyday development.

Responsibilities - Set security baselines for cloud environments, covering identity and access, network boundaries, encryption, logging, and landing zones. - Create reference designs for business applications, developer platforms, AI workloads, APIs, and hybrid cloud transitions. - Review cloud architecture proposals and infrastructure-as-code changes; advise teams on risks, exceptions, and practical mitigations. - Build and improve CI/CD security controls, including code, dependency, and container scanning, secrets handling, policy checks, and reusable pipeline templates. - Support cloud and pipeline incident analysis, containment, and follow-up learning with security colleagues. - Establish a security champions network, provide practical training, and maintain architecture records and measures of adoption.

Requirements - Several years of experience in cloud architecture, platform engineering, or DevSecOps in production environments. - Strong AWS knowledge and working knowledge of Azure, including networking, identity and access management, and landing zones. - Practical infrastructure-as-code experience, ideally with Terraform, and familiarity with CI/CD systems and pipeline security tools. - Understanding of policy as code, container security, secrets management, and identity standards such as OAuth 2.0 and OpenID Connect. - Clear documentation and communication skills, with the ability to advise teams across engineering, platform, infrastructure, and security. - Very good German and English; able to influence through sound technical reasoning and pragmatic solutions.

Benefits and work setup The role is full time and based in Germany, with Hamburg and remote work options noted. The work includes shaping cloud security standards during platform consolidation. The listing mentions a training and certification budget, flexible hours, remote options, 28 days of annual leave, employee discounts, wellbeing support, and workation opportunities.