Cloud Platform Engineer (m/f/d) | Remote (Europe) | Full-time

KD Pharma Group; Bexbach; Remote; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Remote-first across Europe

Competitive compensation with bonuses

Company pension scheme

Site visits to Bexbach possible

Job summary

KD Pharma Group, a global leader in Omega-3 technology, offers a remote-first Azure Infrastructure Lead role. You own the Azure/hybrid environment, shaping architecture, governance and direction across sites, with occasional visits to our Bexbach site.

Work with security, application teams, and regional sites to rationalise the server estate, implement Entra ID and CA, and drive cost visibility while ensuring resilience.

Qualifications

• Strong hands-on experience running Azure infrastructure in a hybrid environment.
• Experience managing on-prem Windows servers alongside Azure.
• Track record of rationalising infrastructure and reducing technical debt.
• Microsoft Intune at scale, including device enrolment and application deployment.
• Microsoft Entra ID, Conditional Access, and MFA.
• Backup, disaster recovery, and monitoring in Azure (Azure Backup, ASR, Monitor).
• Ability to explain technical choices to non-technical colleagues across teams.

Responsibilities

• Infrastructure rationalisation: simplify server estate and reduce debt.
• Azure platform: design, run, and improve Azure and hybrid environment; support dev teams.
• Device management: manage devices and apps across sites via Intune.
• Application delivery: decide delivery methods and reduce reliance on Azure Virtual Desktop.
• Governance and cost: establish standards and tagging; keep spend visible.
• Resilience and monitoring: ensure backups, DR, and monitoring are reliable and tested.
• Security partnership: work with security to implement controls and patch servers.

Skills

Azure infrastructure

PowerShell automation

Hybrid cloud management

Intune at scale

Entra ID / CA / MFA

Azure Monitor / DR

Cost governance

Tools

Azure

Intune

Terraform

Bicep

Azure DevOps

Job description

You want full ownership of a group's Azure and hybrid environment – not just tickets, but the architecture, the governance, and the direction it takes? Then help shape the infrastructure behind an international niche world leader in Omega-3 technology.

Salary: €60,000 – 80,000 / year, depending on experience | Permanent | Immediate start | Remote within Germany or Switzerland (proximity to our Bexbach site is a plus)

Why join us?

• Real ownership: you shape the Azure/hybrid environment, not just maintain it
• Remote-first role across Europe, with occasional touchpoints at our Bexbach site
• Small, hands-on team working closely with security, application teams, and sites worldwide
• Individual career and development opportunities in an internationally operating company

About us – in brief

Headquartered in Bexbach, KD Pharma Group is a mid-sized, internationally active company and one of the world's few manufacturers of Omega-3 concentrates with a purity of up to 99.5% – built on a sole focus on Omega-3 fatty acid research and technology development.

Tasks

• Infrastructure rationalisation: simplify the server estate, on-premises and in Azure; retire or replace unsupported systems and reduce technical debt
• Azure platform: design, run, and improve the Azure and hybrid environment – compute, networking, storage, and identity through Microsoft Entra ID and Conditional Access; support the App Development team with the environments they need
• Device management: manage devices and applications group-wide through Intune, with consistent policies across sites
• Application delivery: decide the right delivery method for each application, starting with reducing reliance on Azure Virtual Desktop
• Governance and cost: establish clear standards, policies, and tagging across Azure; keep spend visible and under control
• Resilience and monitoring: ensure backup, disaster recovery, and monitoring are reliable, tested, and provide early warning of issues
• Security partnership: work with the security function to implement controls, keep servers patched, and resolve vulnerabilities as they're identified

Requirements

Must-have

• Strong hands-on experience running Azure infrastructure: compute, networking (VNets, NSGs, VPN Gateway, ExpressRoute), storage, with PowerShell automation
• Experience managing on-premises Windows servers alongside Azure in a hybrid environment
• A track record of rationalising infrastructure and reducing technical debt (e.g. consolidating servers, replacing unsupported systems)
• Microsoft Intune at scale, including device enrolment and application deployment
• Microsoft Entra ID, Conditional Access, and MFA
• Backup, disaster recovery, and monitoring (Azure Backup, Azure Site Recovery, Azure Monitor)
• Confidence working across teams and sites, explaining technical choices to non-technical colleagues

Nice-to-have

• Azure Virtual Desktop, including migrating users and applications to other delivery methods
• Azure governance and cost management (Azure Policy, tagging, Microsoft Cost Management)
• Azure Arc for managing on-premises servers
• Working knowledge of Microsoft Defender for Cloud and Microsoft Sentinel
• Experience supporting development teams (e.g. Azure App Service, Azure DevOps, GitHub)
• Infrastructure as code (Bicep or Terraform)
• Experience in a regulated environment, such as GxP
• Microsoft certifications, such as AZ-104 or MD-102

Benefits

• Remote-first within Germany or Switzerland
• Individual career and development opportunities in an internationally operating company
• Competitive compensation with Christmas and vacation bonuses
• Company pension scheme
• Free water and coffee
• Company products at employee prices
• Regular team events

Remote (Germany or Switzerland) | Immediate start | Full-time