Cloud & DevSecOps Architect

Start: Immediately | Level: Senior | Location: Germany, remote | Working hours: Full-time (40h/Week) 

As Cloud & DevSecOps Architect (gn) in the Security team, you define how we build and deliver securely in the cloud at The Quality Group. You define binding security requirements and reference architectures for AWS and Azure, for pipelines, Infrastructure as Code, and deployments.

Implementation lies with Cloud & AI Platforms, Engineering, and Infrastructure. You support them in an advisory role, review architectures, and make sure the requirements work in day-to-day practice and are adhered to. You see yourself as an enabler: teams should be able to build securely without having to wait for Security.

In DevSecOps, you go one step further: you help build security gates, pipeline templates, and Policy as Code yourself, so that security is enforced automatically and not just documented.

Your mission

Requirements and Security Architecture

• You define binding security requirements and baselines for AWS and Azure: landing zones, identity and access, network segmentation, encryption, logging
• You develop reference architectures for secure workloads: business applications, developer platform, AI workloads
• You set standards for secure interfaces, for example authentication, authorization, and securing APIs
• You define security requirements for hybrid transitions between on-prem and cloud, aligned with the Infrastructure Architect

Advisory Support for Implementation

• You conduct security and architecture reviews for new cloud initiatives and Infrastructure-as-Code changes
• You are the dedicated point of contact for Cloud & AI Platforms and Engineering in the matrix model, involved from project start
• You assess deviations and exceptions and escalate to the Head of Cyber Security when requirements are not met
• You advise on architecture decisions, for example on the consolidation of cloud platforms
• You support security incidents within your area of responsibility, for example in cloud environments, pipelines, platforms, or web shop frontends: technical analysis, containment, and lessons learned together with the Security Analysts

DevSecOps – where you help build it yourself

• You design security gates in CI/CD pipelines and help build them: SAST, dependency and container scanning, secrets management
• You introduce and operate Policy as Code and Cloud Security Posture Management
• You develop secure pipeline templates and Terraform modules that teams can use via self-service
• You help shape the Secure Engineering Way of Working for repositories, pipelines, and deployments on GitHub