> Markdown version of [/jobs/ext/2955285-cloud-security-architect](https://www.wearedevelopers.com/jobs/ext/2955285-cloud-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud & Security Architect - **Company:** JENOPTIK AG - **Location:** Monheim am Rhein, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Kubernetes Security, .NET Framework, Application Programming Interfaces (APIs), Software System Penetration Testing, Software Suite, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Computer Networks, Continuous Delivery, Data Centers, Persistent Data Structure, DDoS Mitigation, DevOps, Distributed Systems, Identity and Access Management, Internet Security, Virtual Private Networks (VPN), Key Management, Network Security, Enterprise Messaging Systems, Network Architecture, OAuth, OpenID, Software Architecture, RabbitMQ, Release Management, Azure Active Directory, Zero Trust Network Access, Secure Coding, Software Engineering, SQL Injection, Web Services, Azure Service Bus, Enterprise Software Applications, System Availability, Software Security, HybridCloud, Infrastructure as Code (IaC), Containerization, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Apache Kafka, Hardware Infrastructure, Api Gateway, Ddos, Devsecops, Docker, Static Application Security Testing, Microservices, Dynamic Application Security Testing - **Published:** September 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=b85e18ffc46814b6 ## About the Role Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related field required (as the baseline requirement) Master's degree in Computer Science, Cybersecurity, or Information Technology strongly recommended Work Experience: 7+ years of experience in Cloud Architecture, Cybersecurity, and/or DevSecOps roles Execution & Drive: Self-motivated, hands-on practitioner with a "doer" mentality, taking strong personal ownership and pride in the quality, security, and elegance of technical deliverables Technical Leadership: Proven ability to lead, mentor, and inspire engineering teams to continuously raise the bar and strive for excellence Public Internet Exposure: Hands-on experience defending public-facing, internet-exposed applications against threats (e.g., volumetric DDoS, credential stuffing, API abuse, SQLi) Azure Technical Stack: Strong practical knowledge of Microsoft Azure services and security tools (Defender for Cloud, Microsoft Entra ID, Azure Key Vault, Azure Policy, Network Security Groups, Private Endpoints) DevOps Architecture & Infrastructure as Code (IaC): Experience in driving automated infrastructure provisioning, continuous deployment, and telemetry across hybrid Azure, on-premises, and Kubernetes environments, ensuring zero-downtime deployments, high availability, and operational resilience Software & Distributed Architecture Expertise: Strong background in software architecture with proven experience designing and securing microservices architectures. Solid understanding of distributed systems, event-driven messaging systems (e.g., RabbitMQ, Kafka, Azure Service Bus), data persistence patterns, and API gateway integrations ## Description We are seeking an experienced Cloud & Security Architect to join our team and lead the architecture, resilience, and security posture of our enterprise application platform. In this role, you will bridge the gap between Azure Cloud Architecture, Security Engineering, and Modern Application Development.Our application suite is built with C# and .NET and is deployed across a hybrid environment spanning Microsoft Azure, On-Premises infrastructure, and Docker / Kubernetes (K8s). Because our application is exposed directly to the public internet, ensuring robust security - ranging from edge defense and zero-trust networking to secure coding practices and container hardening - is at the core of this role., DevSecOps Culture & Mentorship: Drive and cultivate a security-first and DevOps-oriented culture across software engineering and infrastructure teams Lead hands-on workshops, establish security excellence programs, and mentor developers on secure coding and automated operational practices Public Internet Security & Perimeter Defense: Design and enforce edge protection strategies (Azure Front Door, WAF, Application Gateway, DDoS Protection) for all internet-facing APIs and services Enforce Zero-Trust Network Architecture, strict IP/GEO filtering, rate-limiting, and modern API security protocols (OAuth2, OIDC, mTLS) DevOps & CI/CD Security Governance: Architect, standardize, and help maintain secure CI/CD pipelines (Azure DevOps)Own automated Infrastructure as Code (IaC) deployment workflows Embed continuous security gates (SAST, DAST, dependency scanning, secret detection) into the build and release lifecycle Azure & Hybrid Cloud Architecture: Architect and maintain cloud infrastructure in Azure aligned with cloud security best practices and the Microsoft Well-Architected Framework Design secure hybrid connectivity between Azure, on-premises data centers, and containerized environments using Azure Arc, ExpressRoute, and VPN gateways Container & Kubernetes Security: Define and enforce security controls across containerized workloads (Docker, AKS, and On-Prem Kubernetes) Implement pod security standards, network policies (Calico/Cilium), image scanning, and container runtime threat detection Security Operations & Governance Execution: Coordinate and execute recurring security governance best practices, including regular user access reviews (IAM/PIM audits), cloud application security assessments, penetration testing, and automated policy compliance across all hybrid environments Technical Requirements Ownership & Documentation: Take ownership of translating technologically-heavy business and product goals into detailed technical requirement specifications, system design docs, and architectural decision records (ADRs) Collaborate closely with Product Owners and Developers to define, document, and manage technical user stories and acceptance criteria, Expert / Industry Certifications (A plus): Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Certified: Azure Solutions Architect Expert (AZ-305), Certified Kubernetes Security Specialist (CKS) or CISSP ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking](https://www.wearedevelopers.com/videos/1331-wearedevelopers-live-chrome-for-sale-comet-the-upcoming-perplexity-browser-stealing-and-leaking) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Micro-frontends anti-patterns](https://www.wearedevelopers.com/videos/299-micro-frontends-anti-patterns) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)