Cloud Platform Engineer (m/f/d) - Remote (Europe) - Full-time

KD Pharma Group; Bexbach; Remote; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Remote-first across Europe

Career development opportunities

Christmas and vacation bonuses

Company pension

Free water and coffee

Employee pricing on company products

Regular team events

Job summary

KD Pharma Group is seeking a hands-on Azure Infrastructure Lead to own and shape our Azure/hybrid environment. You will drive architecture, governance, and direction across sites worldwide while working closely with security and development teams.

Remote-first role across Europe with occasional touchpoints at our Bexbach site. The role requires strong Azure, Intune, Entra ID, and DR capabilities, plus experience simplifying complex server estates.

Qualifications

• Strong hands-on experience running Azure infrastructure: compute, networking, storage, with PowerShell automation.
• Experience managing on-premises Windows servers alongside Azure in a hybrid environment.
• Track record of rationalising infrastructure and reducing technical debt.
• Microsoft Intune at scale, including device enrolment and application deployment.
• Microsoft Entra ID, Conditional Access, and MFA.
• Backup, disaster recovery, and monitoring (Azure Backup, Azure Site Recovery, Azure Monitor).
• Confidence working across teams and sites, explaining technical choices to non-technical colleagues.

Responsibilities

• Infrastructure rationalisation: simplify the server estate, on-premises and in Azure; retire or replace unsupported systems and reduce technical debt.
• Azure platform: design, run, and improve the Azure and hybrid environment - compute, networking, storage, and identity through Microsoft Entra ID and Conditional Access; support the App Development team with the environments they need.
• Device management: manage devices and applications group-wide through Intune, with consistent policies across sites.
• Application delivery: decide the right delivery method for each application, starting with reducing reliance on Azure Virtual Desktop.
• Governance and cost: establish clear standards, policies, and tagging across Azure; keep spend visible and under control.
• Resilience and monitoring: ensure backup, disaster recovery, and monitoring are reliable, tested, and provide early warning of issues.
• Security partnership: work with the security function to implement controls, keep servers patched, and resolve vulnerabilities as they are identified.

Skills

Azure infrastructure

Hybrid cloud

PowerShell automation

Intune at scale

Entra ID/CA/MFA

Backup and DR

Cross-team collaboration

Tools

Intune

Azure Monitor

Azure Backup

Azure Site Recovery

ExpressRoute

VPN Gateway

Terraform / Bicep

Job description

You want full ownership of a groups Azure and hybrid environment - not just tickets, but the architecture, the governance, and the direction it takes? Then help shape the infrastructure behind an international niche world leader in Omega-3 technology.

Salary: €60,000 - 80,000 / year, depending on experience | Permanent | Immediate start | Remote within Europe (proximity to our Bexbach site is a plus)

Why join us?

• Real ownership: you shape the Azure/hybrid environment, not just maintain it
• Remote-first role across Europe, with occasional touchpoints at our Bexbach site
• Small, hands-on team working closely with security, application teams, and sites worldwide
• Individual career and development opportunities in an internationally operating company

About us - in brief

Headquartered in Bexbach, KD Pharma Group is a mid-sized, internationally active company and one of the world's few manufacturers of Omega-3 concentrates with a purity of up to 99.5% - built on a sole focus on Omega-3 fatty acid research and technology development.

Tasks

• Infrastructure rationalisation: simplify the server estate, on-premises and in Azure; retire or replace unsupported systems and reduce technical debt
• Azure platform: design, run, and improve the Azure and hybrid environment - compute, networking, storage, and identity through Microsoft Entra ID and Conditional Access; support the App Development team with the environments they need
• Device management: manage devices and applications group-wide through Intune, with consistent policies across sites
• Application delivery: decide the right delivery method for each application, starting with reducing reliance on Azure Virtual Desktop
• Governance and cost: establish clear standards, policies, and tagging across Azure; keep spend visible and under control
• Resilience and monitoring: ensure backup, disaster recovery, and monitoring are reliable, tested, and provide early warning of issues
• Security partnership: work with the security function to implement controls, keep servers patched, and resolve vulnerabilities as they are identified

Requirements

Must-have

• Strong hands-on experience running Azure infrastructure: compute, networking (VNets, NSGs, VPN Gateway, ExpressRoute), storage, with PowerShell automation
• Experience managing on-premises Windows servers alongside Azure in a hybrid environment
• A track record of rationalising infrastructure and reducing technical debt (e.g. consolidating servers, replacing unsupported systems)
• Microsoft Intune at scale, including device enrolment and application deployment
• Microsoft Entra ID, Conditional Access, and MFA
• Backup, disaster recovery, and monitoring (Azure Backup, Azure Site Recovery, Azure Monitor)
• Confidence working across teams and sites, explaining technical choices to non-technical colleagues

Nice-to-have

• Azure Virtual Desktop, including migrating users and applications to other delivery methods
• Azure governance and cost management (Azure Policy, tagging, Microsoft Cost Management)
• Azure Arc for managing on-premises servers
• Working knowledge of Microsoft Defender for Cloud and Microsoft Sentinel
• Experience supporting development teams (e.g. Azure App Service, Azure DevOps, GitHub)
• Infrastructure as code (Bicep or Terraform)
• Experience in a regulated environment, such as GxP
• Microsoft certifications, such as AZ-104 or MD-102

Benefits

• Remote-first within Europe, with flexibility to work from anywhere in your time zone region
• Individual career and development opportunities in an internationally operating company
• Competitive compensation with Christmas and vacation bonuses
• Company pension scheme
• Free water and coffee
• Company products at employee prices
• Regular team events

Remote (Europe) | Immediate start | Full-time