SHOP APOTHEKE EUROPE

Financial Planning and Analysis

• Take ownership of ERP modules and strategic initiatives
• Design scalable solutions supporting Finance systems
• Design and optimize ERP data models, integrations, and end-to-end data flows across Microsoft Dynamics 365 Finance & Operations and AX 2009
• Advise on ERP architecture and process design
• Partner with business stakeholders, internal IT teams, and external vendors
• Lead and mentor colleagues by coordinating smaller initiatives and reviewing deliverables
• Drive continuous improvement by analyzing business processes and implementing best-practice ERP solutions

Senior ERP Consultant – Finance

Engineer

• Design and scale Microsoft Entra ID Governance with Access Reviews and governance processes
• Build script-based automation across a decentralized Microsoft Entra environment
• Automate Service Principal, certificate, secret and federated credential lifecycles using Azure Key Vault
• Design self-service capabilities for Service Principals, Entra Groups and delegated administration
• Review and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions and OAuth consent models
• Build identity monitoring and detection capabilities with Microsoft Sentinel, Azure Monitor, Log Analytics and KQL
• Support Joiner, Mover and Leaver process automation using HRIS as the identity source of truth
• Collaborate with business stakeholders, engineering teams and colleagues on cloud identity governance and security

Senior Cloud Identity Engineer

Full-stack Engineer

• Build and evolve the Core Commerce Services platform
• Create scalable, channel-independent checkout capabilities from technical discovery and design through production
• Define APIs, domain boundaries, and integration patterns
• Make decisions around scalability, reliability, security, observability, and maintainability
• Align technical decisions and integration contracts across Checkout, Payment, and dependent teams
• Maintain clear ownership boundaries across engineering domains
• Mentor engineers through pairing, design discussions, code reviews, and technical feedback
• Raise engineering standards across the team
• Partner with Product to translate business needs into scalable technical solutions
• Establish foundations for AI-powered assistants, agentic commerce, and emerging channels

Staff Engineer, Checkout Platform

Network Engineer

• Design highly available Azure networking solutions across Azure, GCP and on-premises environments
• Shape the enterprise hybrid cloud network and networking strategy
• Design monitoring solutions using KQL, Azure Workbooks, alerts and Azure Connection Monitor
• Proactively detect anomalies, monitor ExpressRoute connectivity and identify business-critical issues
• Modernize network security architecture using Azure Firewall Premium, Network Security Groups and micro segmentation
• Establish Infrastructure as Prompt as a strategic infrastructure automation capability
• Design governance guardrails for the Azure networking platform and develop Azure Policies, Blueprints and enterprise governance standards
• Develop decentralized network management concepts without compromising security
• Develop disaster recovery strategies, automated failover testing and recovery simulations
• Integrate Microsoft Sentinel, Microsoft Defender and network telemetry to detect, investigate and respond to cyber threats
• Collaborate with infrastructure, cloud and security teams on troubleshooting, connectivity and routing
• Support teams operating Sophos-based network infrastructure
• Produce architectural recommendations and decision papers
• Explore Zero Trust Network Access technologies including Microsoft Entra Private Access and Global Secure Access

Senior Azure Network Engineer

Machine Learning Engineer

• Build and operate containerized ML/AI services using orchestration platforms such as Kubernetes
• Troubleshoot production issues and improve reliability, performance, and cost-efficiency of ML/AI services
• Develop maintainable, well-tested Python code for production services, automation, and internal tooling
• Build and improve CI/CD pipelines for testing, deployment, and model iteration
• Implement data and model versioning, validation, and observability across the ML lifecycle
• Contribute to technical designs and architecture decisions
• Participate in code reviews
• Integrate automated security checks into delivery pipelines
• Follow secure software development and operations practices

Mid-Level MLOps Engineer

• Own ERP modules and strategic initiatives
• Design scalable solutions supporting Finance systems
• Design and optimize ERP data models, integrations, and end-to-end data flows across Microsoft Dynamics 365 Finance & Operations and AX 2009
• Advise on ERP architecture and process design
• Partner with business stakeholders, internal IT teams, and external vendors
• Lead and mentor colleagues
• Coordinate smaller initiatives and review deliverables
• Analyze business processes and identify optimization opportunities
• Implement best-practice ERP solutions

• Design and scale Microsoft Entra ID Governance
• Implement Access Reviews and define governance processes with business stakeholders
• Build script-based automation across a decentralized Microsoft Entra environment
• Automate the lifecycle of Service Principals, certificates, secrets and federated credentials
• Integrate workload identity services with Azure Key Vault
• Design self-service capabilities for Service Principals, Entra Groups and delegated administration
• Review and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions and OAuth consent models
• Build identity monitoring and detection capabilities using Microsoft Sentinel, Azure Monitor, Log Analytics and Kusto Query Language
• Support Joiner, Mover and Leaver process automation using HRIS as the identity source of truth
• Help define identity architecture and governance across Azure, Data, ERP and AI platforms
• Collaborate with engineering teams, business stakeholders, colleagues and security teams

• Design highly available Azure networking solutions across Azure, GCP and on-premises environments
• Design monitoring solutions using KQL, Azure Workbooks, Alerts and Azure Connection Monitor
• Modernize network security architecture with Azure Firewall Premium, Network Security Groups and micro-segmentation
• Establish Infrastructure as Prompt as a strategic platform capability
• Design governance guardrails using Azure Policies, Blueprints and enterprise governance standards
• Develop decentralized network management concepts without compromising security
• Develop disaster recovery strategies, automated failover testing and recovery simulations
• Integrate Microsoft Sentinel, Microsoft Defender and network telemetry for automated threat detection and response
• Collaborate with infrastructure, cloud and security teams on troubleshooting, connectivity and routing
• Translate technical concepts into architectural recommendations and decision papers
• Explore Zero Trust Network Access technologies including Microsoft Entra Private Access and Global Secure Access

DevOps Engineer

• Build and maintain secure CI/CD pipelines using Azure DevOps or GitHub Actions
• Implement secrets hygiene, signed artifacts/SBOMs, SAST/DAST/container scanning, least-privilege service connections, and supply-chain hardening
• Automate infrastructure security with Terraform, policy-as-code guardrails, and continuous IaC scanning
• Harden Kubernetes through RBAC, NetworkPolicies, Pod Security Standards, secret management, image signing/scanning, and admission policies
• Protect cloud identities and data using Entra ID roles/Managed Identities, Key Vault, Private Link/NSGs, encryption, and least-privilege access
• Secure ML/MLOps environments, including Databricks, MLflow/model registry, feature stores, model artifact signing, provenance, and runtime isolation
• Connect platform and security telemetry to Microsoft Sentinel and Defender; define alerts and runbooks and support incident response and tabletop exercises
• Manage CVEs and vulnerabilities, publish SBOMs, coordinate mitigations and patches, track exposure windows and SLAs, verify remediation, and report metrics
• Draft and maintain reference architectures, trust-boundary diagrams, data-classification schemes, environment isolation patterns, secret/key-management patterns, and network segmentation
• Contribute to risk assessments, threat modeling, DPIAs, vendor risk reviews, penetration tests, control testing, evidence collection, and audit readiness for ISO 27001, GDPR, EU AI Act, and NIS2 where applicable
• Maintain security baselines and exceptions, own platform security KPIs, ensure retention policies and access reviews, and maintain end-to-end audit trails

Senior DevSecOps Engineer

Software Engineer

• Set engineering direction across Retail Media and Marketplace domains
• Decide where platforms should converge or remain separate
• Lead and grow an engineering organisation of approximately 40 engineers across 5–7 teams
• Develop Engineering Managers and their teams
• Shape the organisation as the domains evolve
• Create an environment with clear ownership and autonomy
• Own delivery, reliability, architecture, and technical debt
• Raise engineering maturity and enable teams to move quickly without compromising quality
• Co-own roadmaps with Product and Commercial teams
• Connect engineering priorities to take rate, advertiser ROAS, seller economics, and contribution margin
• Lead engineering relationships with external platforms, integrators, and agencies
• Make build/buy/partner decisions
• Oversee integrations, SLAs, and vendor performance
• Report to the Executive Director of Engineering / VP of Engineering
• Lead through two Engineering Managers and partner with Product and Commercial leadership

Director, Engineering – Retail Media & Marketplace

• Design highly available Azure networking solutions across Azure, GCP and on-premises environments
• Design monitoring solutions using KQL, Azure Workbooks, Alerts and Azure Connection Monitor
• Modernize network security architecture with Azure Firewall Premium, Network Security Groups and micro-segmentation
• Establish Infrastructure as Prompt capabilities alongside Infrastructure as Code
• Design governance guardrails using Azure Policies, Blueprints and enterprise governance standards
• Develop decentralized network management concepts without compromising security
• Develop disaster recovery strategies, automated failover testing and recovery simulations
• Integrate Microsoft Sentinel, Microsoft Defender and network telemetry to detect, investigate and respond to cyber threats
• Collaborate with infrastructure, cloud and security teams on troubleshooting, connectivity and routing
• Optimize connectivity between Azure, GCP and on-premises environments
• Translate technical concepts into architectural recommendations and decision papers
• Explore Zero Trust Network Access technologies including Microsoft Entra Private Access and Global Secure Access

Product Manager

• Drive the roadmap and vision for AI products, solutions, and business insights tools
• Understand business needs and translate them into technical requirements
• Ensure solutions deliver measurable business impact
• Define AI product value propositions and success KPIs
• Identify and document key use cases
• Drive stakeholder engagement and adoption of AI solutions
• Collaborate with AI engineers, data scientists, and business analysts to create scalable products
• Promote data democratization and AI adoption through innovative product design

Senior AI Product Manager

• Own ERP modules and strategic initiatives
• Design scalable solutions supporting Finance systems
• Design and optimize ERP data models, integrations, and end-to-end data flows across Microsoft Dynamics 365 Finance & Operations and AX 2009
• Advise on ERP architecture and process design
• Partner with business stakeholders, internal IT teams, and external vendors
• Lead and mentor colleagues by coordinating smaller initiatives, reviewing deliverables, and sharing expertise
• Analyze business processes and identify optimization opportunities
• Implement best-practice ERP solutions and drive continuous improvement

• Design and scale Microsoft Entra ID Governance using Access Reviews and governance processes
• Collaborate with business stakeholders to define governance processes
• Build script-based automation for consistent governance across a decentralized Microsoft Entra environment
• Engineer secure workload identity services
• Automate the lifecycle of service principals, certificates, secrets, and federated credentials
• Integrate workload identity solutions with Azure Key Vault
• Design and implement self-service capabilities for service principals, Entra Groups, and delegated administration
• Review and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent models
• Build identity monitoring and detection capabilities for expiring credentials, permission misuse, and guardrail violations
• Use Microsoft Sentinel, Azure Monitor, Log Analytics, and KQL for monitoring and detection
• Support automation of Joiner, Mover, and Leaver processes with HRIS as the identity source of truth
• Collaborate across teams to improve cloud identity design, governance, security, and automation

• Drive the roadmap and vision for AI products, solutions, and business insights tools
• Translate business needs into technical requirements
• Ensure solutions deliver measurable business impact
• Define AI product value propositions and success KPIs
• Identify and document key use cases
• Drive stakeholder engagement and adoption of AI solutions
• Collaborate with AI engineers, data scientists, and business analysts to create scalable products
• Promote data democratization and AI adoption through innovative product design