Logo JENOPTIK AG

Cloud & Security Architect

Neu

JENOPTIK AG

Job

  • Level
    Senior
  • Job Feld
    IT, DevOps, Security
  • Anstellung
    Vollzeit
  • Vertragsart
    Unbefristetes Dienstverhältnis
  • Ort
    Monheim
  • Arbeitsmodell
    Hybrid, Onsite

    • Job Zusammenfassung

    In dieser Rolle entwickelst du Sicherheitsarchitekturen für eine hybride Infrastruktur in Azure sowie für containerisierte Umgebungen und sicherst Internet-Anwendungen gegen Bedrohungen wie DDoS und API-Missbrauch ab.

    Job Technologien

    Deine Rolle im Team

    • We are seeking an experienced Cloud & Security Architect to join our team and lead the architecture, resilience, and security posture of our enterprise application platform.
    • In this role, you will bridge the gap between Azure Cloud Architecture, Security Engineering, and Modern Application Development.
    • Our application suite is built with C# and .NET and is deployed across a hybrid environment spanning Microsoft Azure, On-Premises infrastructure, and Docker / Kubernetes (K8s).
    • Because our application is exposed directly to the public internet, ensuring robust security - ranging from edge defense and zero-trust networking to secure coding practices and container hardening - is at the core of this role.
    • Drive and cultivate a security-first and DevOps-oriented culture across software engineering and infrastructure teams.
    • Lead hands-on workshops, establish security excellence programs, and mentor developers on secure coding and automated operational practices.
    • Design and enforce edge protection strategies (Azure Front Door, WAF, Application Gateway, DDoS Protection) for all internet-facing APIs and services.
    • Enforce Zero-Trust Network Architecture, strict IP/GEO filtering, rate-limiting, and modern API security protocols (OAuth2, OIDC, mTLS).
    • Architect, standardize, and help maintain secure CI/CD pipelines (Azure DevOps).
    • Own automated Infrastructure as Code (IaC) deployment workflows.
    • Embed continuous security gates (SAST, DAST, dependency scanning, secret detection) into the build and release lifecycle.
    • Architect and maintain cloud infrastructure in Azure aligned with cloud security best practices and the Microsoft Well-Architected Framework.
    • Design secure hybrid connectivity between Azure, on-premises data centers, and containerized environments using Azure Arc, ExpressRoute, and VPN gateways.
    • Define and enforce security controls across containerized workloads (Docker, AKS, and On-Prem Kubernetes).
    • Implement pod security standards, network policies (Calico/Cilium), image scanning, and container runtime threat detection.
    • Coordinate and execute recurring security governance best practices, including regular user access reviews (IAM/PIM audits), cloud application security assessments, penetration testing, and automated policy compliance across all hybrid environments.
    • Take ownership of translating technologically-heavy business and product goals into detailed technical requirement specifications, system design docs, and architectural decision records (ADRs).
    • Collaborate closely with Product Owners and Developers to define, document, and manage technical user stories and acceptance criteria.

    Unsere Erwartungen an dich

    Ausbildung

    • Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related field required (as the baseline requirement).
    • Master's degree in Computer Science, Cybersecurity, or Information Technology strongly recommended.

    Qualifikationen

    • Self-motivated, hands-on practitioner with a "doer" mentality, taking strong personal ownership and pride in the quality, security, and elegance of technical deliverables.
    • Proven ability to lead, mentor, and inspire engineering teams to continuously raise the bar and strive for excellence.
    • Strong practical knowledge of Microsoft Azure services and security tools (Defender for Cloud, Microsoft Entra ID, Azure Key Vault, Azure Policy, Network Security Groups, Private Endpoints).
    • Solid understanding of distributed systems, event-driven messaging systems (e.g., RabbitMQ, Kafka, Azure Service Bus), data persistence patterns, and API gateway integrations.
    • Microsoft Azure Associate Certifications (Preferred/Targeted): Azure Security Engineer Associate (AZ-500), Azure Administrator Associate (AZ-104), Azure Developer Associate (AZ-204), Azure Network Engineer Associate (AZ-700).
    • Expert / Industry Certifications (A plus): Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Certified: Azure Solutions Architect Expert (AZ-305), Certified Kubernetes Security Specialist (CKS) or CISSP.

    Erfahrung

    • 7+ years of experience in Cloud Architecture, Cybersecurity, and/or DevSecOps roles.
    • Hands-on experience defending public-facing, internet-exposed applications against threats (e.g., volumetric DDoS, credential stuffing, API abuse, SQLi).
    • Experience in driving automated infrastructure provisioning, continuous deployment, and telemetry across hybrid Azure, on-premises, and Kubernetes environments, ensuring zero-downtime deployments, high availability, and operational resilience.
    • Strong background in software architecture with proven experience designing and securing microservices architectures.

    Benefits

    Work-Life-Integration

    Gesundheit, Fitness & Fun

    Mehr Netto

    Essen & Trinken

    Themen mit denen du dich im Job beschäftigst

    Job Standorte

    Map of company locations© OpenMapTiles, © OpenStreetMap contributors

    • Standort Monheim

      86653 Bayern

      Deutschland

    Das ist dein Arbeitgeber

    JENOPTIK AG

    JENOPTIK AG

    Die Opt-In Group ist ein weltweit operierendes Technologieunternehmen, welches sich auf die Produktion und den Vertrieb von optical equipment spezialisiert hat. Hauptsächlich bedient das Unternehmen die semiconductor equipment industry, medical technology, automotive and mechanical engineering, automation, road traffic safety and civil security, aviation, defense and security.

    Description

  • Unternehmensgröße
    250+ Employees
  • Unternehmenstyp
    Etablierte Firma
  • Arbeitsmodell
    Hybrid, Onsite
  • Branche
    Industrie, Produktion
    • Logo JENOPTIK AG

    Cloud & Security Architect

    JENOPTIK AG
    Ort
    Monheim
    Arbeitsmodell
    Hybrid, Onsite
    Diversität
    Für alle Personen geeignet (m/w/d)
    Nur Englisch
    Nur Englisch erforderlich

    Weitere Jobs