Cloud & DevSecOps Architect (gn)

thequalitygroupgmbh2; United States; Hybrid; USD 100,000 - 144,000; Full time

Benefits offered by this job

Training and certification budget

Flexible hours

Remote options

28 days annual leave

Employee discounts

Wellbeing support

Workation opportunities

Job summary

Thequalitygroupgmbh2 is seeking a security-focused Cloud Architect to define security standards for cloud platforms, guide engineering through architecture decisions, and build reusable controls that embed secure practices in development. You will lead reference designs for apps, platforms, and AI workloads while reviewing IaC changes and advising on risks.

With strong AWS expertise and familiarity with Azure, you will implement policy-as-code, container security, and secrets management, and

Qualifications

• Several years of experience in cloud architecture, platform engineering, or DevSecOps in production environments.
• Strong AWS knowledge and working knowledge of Azure, including networking, identity and access management, and landing zones.
• Practical infrastructure-as-code experience, ideally with Terraform, and familiarity with CI/CD systems and pipeline security tools.
• Understanding of policy as code, container security, secrets management, and identity standards such as OAuth 2.0 and OpenID Connect.
• Clear documentation and communication skills, with the ability to advise teams across engineering, platform, infrastructure, and security.
• Very good German and English; able to influence through sound technical reasoning and pragmatic solutions.

Responsibilities

• Set security baselines for cloud environments, covering identity and access, network boundaries, encryption, logging, and landing zones.
• Create reference designs for business applications, developer platforms, AI workloads, APIs, and hybrid cloud transitions.
• Review cloud architecture proposals and infrastructure-as-code changes; advise teams on risks, exceptions, and practical mitigations.
• Build and improve CI/CD security controls, including code, dependency, and container scanning, secrets handling, policy checks, and reusable pipeline templates.
• Support cloud and pipeline incident analysis, containment, and follow-up learning with security colleagues.
• Establish a security champions network, provide practical training, and maintain architecture records and measures of adoption.

Skills

Cloud architecture

DevSecOps

AWS

Azure

Terraform

CI/CD security

Policy as code

Container security

Secrets management

OAuth 2.0 / OIDC

Documentation

Communication

German language

English language

Tools

Terraform

CI/CD pipelines

Security scanning tools

Job description

Role overview

Define and embed security standards for cloud platforms, infrastructure, and software delivery. You will guide engineering and platform teams through architecture decisions and reviews, while helping build reusable controls that make secure practices part of everyday development.

Responsibilities

• Set security baselines for cloud environments, covering identity and access, network boundaries, encryption, logging, and landing zones.


• Create reference designs for business applications, developer platforms, AI workloads, APIs, and hybrid cloud transitions.


• Review cloud architecture proposals and infrastructure-as-code changes; advise teams on risks, exceptions, and practical mitigations.


• Build and improve CI/CD security controls, including code, dependency, and container scanning, secrets handling, policy checks, and reusable pipeline templates.


• Support cloud and pipeline incident analysis, containment, and follow-up learning with security colleagues.


• Establish a security champions network, provide practical training, and maintain architecture records and measures of adoption.

Requirements

• Several years of experience in cloud architecture, platform engineering, or DevSecOps in production environments.


• Strong AWS knowledge and working knowledge of Azure, including networking, identity and access management, and landing zones.


• Practical infrastructure-as-code experience, ideally with Terraform, and familiarity with CI/CD systems and pipeline security tools.


• Understanding of policy as code, container security, secrets management, and identity standards such as OAuth 2.0 and OpenID Connect.


• Clear documentation and communication skills, with the ability to advise teams across engineering, platform, infrastructure, and security.


• Very good German and English; able to influence through sound technical reasoning and pragmatic solutions.

Benefits and work setup

The role is full time and based in Germany, with Hamburg and remote work options noted. The work includes shaping cloud security standards during platform consolidation.

• The listing mentions a training and certification budget, flexible hours, remote options, 28 days of annual leave, employee discounts, wellbeing support, and workation opportunities.