Cloud & DevSecOps Architect (gn)

The Quality Group; Hamburg; À distance; EUR 90 000 - 150 000; Plein temps

Avantages offerts par ce poste

Flexible hours

Remote options

Employee discounts

Wellpass subsidy

Workation

Corporate benefits

28 days vacation

Résumé du poste

The Quality Group is seeking a Senior Cloud & DevSecOps Architect to lead security architecture for cloud initiatives in a German-based role with remote options. You will define security baselines for AWS and Azure, support IaC, and ensure pipelines enforce security policies across platforms.

As a senior member of the Security team, you will collaborate with Cloud, AI Platforms, and Engineering to embed secure practices, build reusable templates, and drive governance and champion programs across

Qualifications

• Several years of experience in production as Cloud/DevSecOps architect or similar.
• Strong knowledge of AWS and Azure networking, IAM, and landing zones.

Responsabilités

• Define binding security requirements and baselines for cloud platforms.
• Review architectures and advise on secure design and deployment.
• Create security gates, CI/CD templates, and Policy as Code implementations.
• Collaborate with Engineering, Platform, Infrastructure and Security teams.

Connaissances

AWS & Azure

Terraform

GitHub Actions

Pipeline security

Policy as Code

Container security

Secrets management

IAM/OIDC

Outils

Terraform

GitHub Actions

Description du poste

Start: Immediately | Level: Senior | Location: Germany, remote | Working hours: Full-time (40h/Week)

As Cloud & DevSecOps Architect (gn) in the Security team, you define how we build and deliver securely in the cloud at The Quality Group. You define binding security requirements and reference architectures for AWS and Azure, for pipelines, Infrastructure as Code, and deployments.

Implementation lies with Cloud & AI Platforms, Engineering, and Infrastructure. You support them in an advisory role, review architectures, and make sure the requirements work in day-to-day practice and are adhered to. You see yourself as an enabler: teams should be able to build securely without having to wait for Security.

In DevSecOps, you go one step further: you help build security gates, pipeline templates, and Policy as Code yourself, so that security is enforced automatically and not just documented.

Your mission

Requirements and Security Architecture

• You define binding security requirements and baselines for AWS and Azure: landing zones, identity and access, network segmentation, encryption, logging
• You develop reference architectures for secure workloads: business applications, developer platform, AI workloads
• You set standards for secure interfaces, for example authentication, authorization, and securing APIs
• You define security requirements for hybrid transitions between on-prem and cloud, aligned with the Infrastructure Architect

Advisory Support for Implementation

• You conduct security and architecture reviews for new cloud initiatives and Infrastructure-as-Code changes
• You are the dedicated point of contact for Cloud & AI Platforms and Engineering in the matrix model, involved from project start
• You assess deviations and exceptions and elevate to the Head of Cyber Security when requirements are not met
• You advise on architecture decisions, for example on the consolidation of cloud platforms
• You support security incidents within your area of responsibility, for example in cloud environments, pipelines, platforms, or web shop frontends: technical analysis, containment, and lessons learned together with the Security Analysts

DevSecOps – where you help build it yourself

• You design security gates in CI/CD pipelines and help build them: SAST, dependency and container scanning, secrets management
• You introduce and operate Policy as Code and Cloud Security Posture Management
• You develop secure pipeline templates and Terraform modules that teams can use via self-service
• You help shape the Secure Engineering Way of Working for repositories, pipelines, and deployments on GitHub

Enablement, Security Champions, and Governance

• You build and lead a Security Champion program: one point of contact per Engineering, Platform, and Infrastructure team who carries security into day-to-day work
• You empower the champions through training, regular exchange sessions, and practical guides
• You ensure knowledge transfer through reviews, pair programming, and workshops
• You maintain the security architecture documentation as a basis for audits and decisions
• You make impact measurable, for example through the share of pipelines with active security gates and active champions per team

Your experience & skills

Technical

• You bring several years of experience as a Cloud Architect, Platform Engineer, or DevSecOps Engineer in production environments
• You have solid knowledge of AWS and good knowledge of Azure, including networking, IAM, and landing zone concepts
• You have hands‑on production experience with Infrastructure as Code, preferably Terraform
• You bring experience with CI/CD, ideally GitHub Actions, as well as with security tooling in pipelines
• You understand Policy as Code, container security, and secrets management
• You are familiar with identity and access concepts, for example Microsoft Entra ID, OAuth2, and OIDC

Personal

• You convince through arguments and good solutions, not through hierarchy
• You think pragmatically: security that slows teams down in their daily work gets bypassed
• You document in a way that allows others to understand and implement your architecture decisions
• You enjoy working across teams with Engineering, Platform, Infrastructure, and Security
• You speak very good German and English

What we offer

• Room to shape things at a time when we are consolidating cloud platforms and building new security standards
• Real impact: your architecture and your guardrails become the standard for Engineering, Platform, and Infrastructure
• Modern stack with AWS, Azure, Terraform, GitHub, and a growing AI platform
• Budget for further training and certifications
• Location: Hamburg with a remote share

Why choose us?

Being part of our team means joining a high-performing company with a diverse and inclusive culture. In our fast-growing team of over 1,200 employees, we combine our passion for sports nutrition, supplements, and healthy foods with cutting-edge technology, production, and logistics processes. All of this serves one goal: providing our customers with top-quality products to support their healthy and active lifestyle.

You can look forward to a strong sense of team spirit, ongoing opportunities for professional growth and responsibility, and an exciting work environment that blends lifestyle and career. With locations in Hamburg, Elmshorn, Kaltenkirchen/Nützen, and Elsdorf, TQG offers diverse career opportunities in areas such as technology, product development, sales, marketing, and logistics. Additionally, you’ll benefit from:

• Flexible working hours and remote work options
• Attractive employee discounts
• Subsidy for the E-gym Wellpass
• Workation
• Corporate benefits
• 28 days vacation/year
• and much more

About Us

The Quality Group (TQG) is an innovative provider of sports nutrition products, bringing together the successful brandsESNandMore Nutritionsince 2021.

ESNhas been the German market leader in sports nutrition since 2004, offering products like protein powders, bars, and supplements designed for ambitious fitness goals. Founded in 2017,More Nutritionfocuses on healthy, reduced-sugar foods, providing solutions for conscious nutrition and weight management without compromise.

TQG’s vision is to help people become the best version of themselves. With passion and innovation, the company develops high-quality products that promote health, performance, and joy in life. Its agile company culture and exciting career opportunities make TQG a strong partner not only for customers but also for employees.

This is us – The Quality Group – nice to meet you! Now it’s your turn!
We look forward to your application! Regardless of gender, age, background, or identity – what matters to us is who you are and what you bring to the table. Join our team and grow with us!