Design and operate secure-by-default cloud platform components on Azure, including network, compute, Kubernetes, and storage security
Implement platform-level security guardrails and baseline configurations using Infrastructure as Code (e.g., Terraform)
Define and enforce strong identity, access, and privilege management (RBAC, least privilege, JIT/privileged access)
Embed security controls into CI/CD pipelines (secure builds, secrets management, dependency and artifact integrity) following DevSecOps best practices
Enable security monitoring, logging, and SIEM integration; support incident response and platform-level threat detection
Support vulnerability management, secure patching, and compliance with security frameworks (e.g., ISO 27001, TISAX)
Collaborate with engineering teams to build, operate, and continuously improve a reliable, scalable Azure/Kubernetes platform, including developer self-service and operational support

Requirements

Strong hands-on experience with cloud security in Azure environments, including designing and implementing security controls
Proven experience implementing security through automation using Infrastructure as Code (Terraform), CI/CD pipelines, and policy-as-code
Hands-on expertise with Kubernetes (preferably AKS) and microservices / event-driven architectures
Experience with CI/CD and GitOps practices (Azure DevOps or equivalent tools)
Strong Linux fundamentals and scripting skills (Python and/or Shell) for automation; configuration management tools (e.g., Ansible) are a plus
Experience with monitoring, observability, and platform security tooling (e.g., OpenTelemetry, Prometheus/Grafana, container security tools), with exposure to DevSecOps and compliance frameworks (ISO 27001, TISAX) considered an advantage

Benefits

A unique opportunity combining the energy of a scale up with the power of BMW, Mercedes Benz Mobility & bp
Working on products & services with a high social impact
An international team of talented people who love what they do and live a collaborative spirit
An open minded culture with room for growth and the freedom to bring in own ideas
Subsidized gym membership
Subsidized office lunch benefit
Personal development budget for your professional growth
Monthly mobility budget
Up to 2 days of home office in a week
Offsite/ team events & much more and modern, sunny offices in Berlin & Munich
delicious coffee & tea, fresh fruits and an office dog friendly environment

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cloud securityInfrastructure as CodeTerraformKubernetesCI/CDGitOpsLinuxscriptingPythonShell

Soft Skills

collaborationincident responseproblem-solvingcommunicationcontinuous improvement

Certifications

ISO 27001TISAX