Jobs / The Quality Group GmbH
Cloud & DevSecOps Architect (gn)
The Quality Group GmbH · Hamburg, HH, Deutschland
Hamburg, HH, DeutschlandRemote
Remuneration
Budget für Weiterbildung und Zertifizierungen; Mitarbeiterrabatte; flexible Arbeitszeiten und Homeoffice; Mobilitäts- und Fitnesszuschüsse; betriebliche Altersvorsorge; Workation-Optionen
Location
Hamburg, HH, Deutschland
Visa sponsorship
Not specified
Job summary
Der Senior Cloud & DevSecOps Architect definiert Security-Vorgaben und Referenzarchitekturen für AWS- und Azure-Umgebungen und begleitet Engineering-, Plattform- und Infrastructure-Teams bei deren Umsetzung. Die Rolle verbindet Architektur-Reviews und Cloud-Incident-Unterstützung mit dem praktischen Aufbau von CI/CD-Security-Gates, Policy as Code, Cloud Security Posture Management sowie wiederverwendbaren Terraform-Modulen und Pipeline-Templates. Außerdem etabliert sie Security Champions und sichere Entwicklungspraktiken für Cloud-, AI- und hybride Workloads.
Benefits
Training and certification budgetProduct discountsFlexible working hours and remote workMobility and fitness subsidiesOccupational pension planWorkation options
Qualifications
- Several years of experience as a Cloud Architect, Platform Engineer, or DevSecOps Engineer in production environments
- Strong AWS knowledge and good Azure knowledge, including networking, IAM, and landing-zone concepts
- Production experience with Infrastructure as Code, preferably Terraform
- Experience with CI/CD and pipeline security tooling, ideally GitHub Actions
- Understanding of Policy as Code, container security, and secrets management
- Knowledge of identity and access concepts, such as Microsoft Entra ID, OAuth2, and OIDC
- Very good German and English
Responsibilities
- Define security requirements and baselines for AWS and Azure, including landing zones, identity, access, network segmentation, encryption, and logging
- Develop reference architectures for business applications, developer platforms, and AI workloads
- Set security standards for APIs and hybrid on-premises-to-cloud environments
- Review cloud architectures and Infrastructure as Code changes
- Advise engineering, platform, and infrastructure teams on architecture decisions and security exceptions
- Support cloud, pipeline, platform, and web-shop security incidents through technical analysis, containment, and lessons learned
- Design and implement CI/CD security gates for SAST, dependency scanning, container scanning, and secrets management
- Introduce and operate Policy as Code and Cloud Security Posture Management
- Develop reusable secure pipeline templates and Terraform modules
- Establish secure engineering practices for GitHub repositories, pipelines, and deployments
- Build and lead a Security Champion program and provide training, workshops, and practical guidance
- Maintain security architecture documentation and track adoption of security controls
Skills
AWSAzureGitHubGitHub ActionsIAMTerraformREST
Languages
GermanEnglish
Work schedule
Full-time, 40 hours per weekFlexible working hours
Industry
Sport nutritionNutrition products
Relocation
No