Azure Cloud Platform Architect – Enterprise-Scale (Hybrid)

Giesecke+Devrient; el Prat de Llobregat; Hybrid; EUR 90,000 - 150,000; Full time

Benefits offered by this job

International Collaboration

Meaningful Projects

Career Development

Flexible Working (hybrid) Time

Job summary

Giesecke+Devrient is seeking an experienced Cloud Platform Architect to lead the design and evolution of a global Azure platform within the Business Cloud Services team. You will translate business needs into secure, scalable cloud solutions and drive architectural patterns, governance, and blueprints across Cloud DevOps and Engineering.

The role focuses on Landing Zones, security, high availability, and cost optimization, with a strong emphasis on PaaS and Zero Trust.

Qualifications

• 10+ years of experience across infrastructure engineering, cloud, platform engineering, SRE, or architecture with 5+ years hands‑on designing enterprise Azure architectures.
• Proven experience translating complex requirements into end-to-end cloud architectures and documentation.
• Strong knowledge of enterprise Azure networking (Hub‑and‑Spoke, Firewall, UDRs, ExpressRoute/VPN, WAF, Private Endpoints).
• Extensive knowledge of Azure Landing Zones, CAF, Management Groups, Azure Policy, RBAC, and subscription provisioning models.
• Experience with PaaS‑first secure cloud solutions and Zero Trust principles.
• Solid security architecture understanding: IAM, encryption, compliance, high availability, DR, resilience.
• Autonomous, proactive decision maker who challenges assumptions and owns outcomes.
• Excellent written and spoken English; able to collaborate with distributed teams.

Responsibilities

• Design end‑to‑end Azure architectures for enterprise workloads with clear diagrams and implementation guidelines.
• Define Azure Landing Zones and governance models aligned to CAF and enterprise requirements.
• Develop secure network architectures (Hub‑and‑Spoke, ExpressRoute, Private Endpoints) across regions and environments.
• Promote PaaS‑first, cloud‑native patterns and secure, resilient solutions using Azure services.
• Embed Zero Trust, identity controls, encryption, and compliance into platform designs.
• Create reusable ADRs, blueprints, and technical standards for the enterprise platform.
• Provide technical leadership to Cloud DevOps and Engineering teams and review complex designs.
• Identify risks and drive improvements for resilience, cost efficiency, and reliability.

Skills

Azure architecture

Technical design

Cloud governance

PaaS‑first

Zero Trust

Security architecture

Autonomy

Communication

Education

Bachelor's degree in CS/Eng

Tools

Azure Active Directory

ExpressRoute

Azure Firewall

Azure Policy

RBAC

App Services

Databricks

Job description

Giesecke+Devrient is seeking an experienced Cloud Platform Architect to lead the design and evolution of a global Azure platform within the Business Cloud Services team. You will translate business needs into secure, scalable cloud solutions and drive architectural patterns, governance, and blueprints across Cloud DevOps and Engineering.

The role focuses on Landing Zones, security, high availability, and cost optimization, with a strong emphasis on PaaS and Zero Trust.