Cloud and Security Architect (m/f/d)

• flexible working hours through a modern flexitime scheme
• an attractive remuneration package with variable salary components
• personalised training opportunities and targeted staff development
• A structured induction programme with personal mentoring
• Extensive fitness facilities and workplace health management
• A wide range of employee benefits with exclusive shopping discounts
• A modern working environment in an innovative technology company
• 20 per cent remote working possible

What you can always count on at persona service:

• a direct route to permanent employment with our clients
• close support throughout the entire application process
• close coordination with you and your potential employer, taking your preferences into account
• intensive preparation for the job interview

You will design our hybrid infrastructure across Azure, on-premises and container environments, and securely connect them via Azure Arc, ExpressRoute and VPN gateways. Using Azure Front Door, WAF and Application Gateway, you will protect our APIs from attacks and build a zero-trust architecture using OAuth2, OIDC and mTLS. In Azure DevOps, you will develop secure CI/CD pipelines and Infrastructure-as-Code workflows, and integrate automated security checks such as SAST and DAST for Docker, AKS and Kubernetes, you define security standards, such as Pod Security Policies, network rules using Calico or Cilium, and image scanning. You also carry out access reviews and penetration tests, and promote a security-first culture, including through workshops and clear technical documentation

• You have a degree in Computer Science, Cybersecurity or a comparable qualification, ideally supplemented by a Master’s degree – for example, as a Security Engineer (m/f/d) or Cloud Architect (m/f/d)
• You have at least 7 years’ experience in cloud architecture, cybersecurity or DevSecOps, including protecting public applications against DDoS or API attacks
• You are just as familiar with tools such as Defender for Cloud, Microsoft Entra ID and Azure Key Vault as you are with microservices and messaging systems such as Kafka
• Certifications such as AZ-500, AZ-104 or AZ-700 are a plus; expert certifications such as SC-100, AZ-305 or CKS round off your profile
• You enjoy taking on responsibility, motivating your team and speak German and English very well