> Markdown version of [/jobs/ext/3725660-cloud-devsecops-architect-gn](https://www.wearedevelopers.com/jobs/ext/3725660-cloud-devsecops-architect-gn). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud & DevSecOps Architect (gn) - **Company:** The Quality Group GmbH - **Location:** Hamburg, Germany (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Microsoft Access, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Business Software, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Github, Identity and Access Management, Key Management, Network Segmentation, OAuth, OpenID, Pair Programming, Azure Active Directory, Policy as Code, Data Logging, Cloud Platform System, AI Platforms, Maintaining Code, Terraform, Devsecops, Static Application Security Testing - **Published:** October 14, 2026 - **Apply:** https://startup.jobs/cloud-devsecops-architect-gn-the-quality-group-10442333 ## About the Role * You bring several years of experience as a Cloud Architect, Platform Engineer, or DevSecOps Engineer in production environments * You have solid knowledge of AWS and good knowledge of Azure, including networking, IAM, and landing zone concepts * You have hands-on production experience with Infrastructure as Code, preferably Terraform * You bring experience with CI/CD, ideally GitHub Actions, as well as with security tooling in pipelines * You understand Policy as Code, container security, and secrets management * You are familiar with identity and access concepts, for example Microsoft Entra ID, OAuth2, and OIDC Personal * You convince through arguments and good solutions, not through hierarchy * You think pragmatically: security that slows teams down in their daily work gets bypassed * You document in a way that allows others to understand and implement your architecture decisions * You enjoy working across teams with Engineering, Platform, Infrastructure, and Security * You speak very good German and English ## Description * You define binding security requirements and baselines for AWS and Azure: landing zones, identity and access, network segmentation, encryption, logging * You develop reference architectures for secure workloads: business applications, developer platform, AI workloads * You set standards for secure interfaces, for example authentication, authorization, and securing APIs * You define security requirements for hybrid transitions between on-prem and cloud, aligned with the Infrastructure Architect Advisory Support for Implementation * You conduct security and architecture reviews for new cloud initiatives and Infrastructure-as-Code changes * You are the dedicated point of contact for Cloud & AI Platforms and Engineering in the matrix model, involved from project start * You assess deviations and exceptions and escalate to the Head of Cyber Security when requirements are not met * You advise on architecture decisions, for example on the consolidation of cloud platforms * You support security incidents within your area of responsibility, for example in cloud environments, pipelines, platforms, or web shop frontends: technical analysis, containment, and lessons learned together with the Security Analysts DevSecOps - where you help build it yourself * You design security gates in CI/CD pipelines and help build them: SAST, dependency and container scanning, secrets management * You introduce and operate Policy as Code and Cloud Security Posture Management * You develop secure pipeline templates and Terraform modules that teams can use via self-service * You help shape the Secure Engineering Way of Working for repositories, pipelines, and deployments on GitHub Enablement, Security Champions, and Governance * You build and lead a Security Champion program: one point of contact per Engineering, Platform, and Infrastructure team who carries security into day-to-day work * You empower the champions through training, regular exchange sessions, and practical guides * You ensure knowledge transfer through reviews, pair programming, and workshops * You maintain the security architecture documentation as a basis for audits and decisions * You make impact measurable, for example through the share of pipelines with active security gates and active champions per team