Cloud Platform Engineer (m/f/d) | Remote (Europe) | Full-time

Free resume; Bexbach; Hybrid; EUR 60.000 - 80.000; Vollzeit

Benefits dieser Stelle

Remote-first across Europe

Company pension scheme

Free water and coffee

Company products at employee prices

Regular team events

Christmas and vacation bonuses

Zusammenfassung

KD Pharma Group in Germany is seeking a senior Azure and hybrid infrastructure lead to own the architecture, governance, and direction of our cloud environment. You will shape the infrastructure behind an international Omega-3 technology leader, guiding compute, networking, storage, and identity.

Reporting directly to the IT leadership, you will drive Azure platform design, Intune device management, and security controls across sites in Europe.

Qualifikationen

• Strong hands-on experience running Azure infrastructure: compute, networking, and storage with PowerShell automation.
• Experience managing on-premises Windows servers alongside Azure in a hybrid environment.
• Proven track record of rationalising infrastructure and reducing technical debt.
• Microsoft Intune at scale, including device enrolment and application deployment.
• Microsoft Entra ID, Conditional Access, and MFA.
• Ability to communicate technical choices to non-technical colleagues across teams.

Aufgaben

• Infrastructure rationalisation: simplify the server estate, on-premises and in Azure; retire or replace unsupported systems and reduce technical debt.
• Azure platform: design, run, and improve the Azure and hybrid environment – compute, networking, storage, and identity through Microsoft Entra ID and Conditional Access; support the App Development team with the environments they need
• Device management: manage devices and applications group-wide through Intune, with consistent policies across sites
• Application delivery: decide the right delivery method for each application, starting with reducing reliance on Azure Virtual Desktop
• Governance and cost: establish clear standards, policies, and tagging across Azure; keep spend visible and under control
• Resilience and monitoring: ensure backup, disaster recovery, and monitoring are reliable, tested, and provide early warning of issues
• Security partnership: work with the security function to implement controls, keep servers patched, and resolve vulnerabilities as they're identified

Kenntnisse

Azure infrastructure

PowerShell automation

Hybrid environment

Intune management

Entra ID & MFA

Cross-team collaboration

Tools

Intune

Microsoft Entra ID

Conditional Access

MFA

Azure Arc

Terraform / IaC

Jobbeschreibung

Job Description

You want full ownership of a group's Azure and hybrid environment – not just tickets, but the architecture, the governance, and the direction it takes? Then help shape the infrastructure behind an international niche world leader in Omega-3 technology.

Salary: €60,000 – 80,000 / year, depending on experience | Permanent | Immediate start | Remote within Europe (proximity to our Bexbach site is a plus)

• Real ownership: you shape the Azure/hybrid environment, not just maintain it
• Remote-first role across Europe, with occasional touchpoints at our Bexbach site
• Small, hands-on team working closely with security, application teams, and sites worldwide
• Individual career and development opportunities in an internationally operating company

About us – in brief

Headquartered in Bexbach, KD Pharma Group is a mid-sized, internationally active company and one of the world's few manufacturers of Omega-3 concentrates with a purity of up to 99.5% – built on a sole focus on Omega-3 fatty acid research and technology development.

Tasks

• Infrastructure rationalisation: simplify the server estate, on-premises and in Azure; retire or replace unsupported systems and reduce technical debt
• Azure platform: design, run, and improve the Azure and hybrid environment – compute, networking, storage, and identity through Microsoft Entra ID and Conditional Access; support the App Development team with the environments they need
• Device management: manage devices and applications group-wide through Intune, with consistent policies across sites
• Application delivery: decide the right delivery method for each application, starting with reducing reliance on Azure Virtual Desktop
• Governance and cost: establish clear standards, policies, and tagging across Azure; keep spend visible and under control
• Resilience and monitoring: ensure backup, disaster recovery, and monitoring are reliable, tested, and provide early warning of issues
• Security partnership: work with the security function to implement controls, keep servers patched, and resolve vulnerabilities as they're identified

Requirements

Must-have

• Strong hands-on experience running Azure infrastructure: compute, networking (VNets, NSGs, VPN Gateway, ExpressRoute), storage, with PowerShell automation
• Experience managing on-premises Windows servers alongside Azure in a hybrid environment
• A track record of rationalising infrastructure and reducing technical debt (e.g. consolidating servers, replacing unsupported systems)
• Microsoft Intune at scale, including device enrolment and application deployment
• Microsoft Entra ID, Conditional Access, and MFA
• Confidence working across teams and sites, explaining technical choices to non-technical colleagues

Nice-to-have

• Azure Virtual Desktop, including migrating users and applications to other delivery methods
• Azure governance and cost management (Azure Policy, tagging, Microsoft Cost Management)
• Azure Arc for managing on-premises servers
• Working knowledge of Microsoft Defender for Cloud and Microsoft Sentinel
• Infrastructure as code (Bicep or Terraform)
• Experience in a regulated environment, such as GxP
• Microsoft certifications, such as AZ-104 or MD-102
• Remote-first within Europe, with flexibility to work from anywhere in your time zone region
• Individual career and development opportunities in an internationally operating company
• Competitive compensation with Christmas and vacation bonuses
• Company pension scheme
• Free water and coffee
• Company products at employee prices
• Regular team events