Lead Cloud Security Engineer (Azure)

Quick Facts

• Focus: Azure security engineering for enterprise cloud workloads
• Work: 100% role; partial remote possible
• Location: Stuttgart

Description

You will assess, design, and support secure Azure architectures for new and existing cloud workloads. You will run project and architecture security reviews, create reusable Azure security patterns and templates, and enable application/service/platform teams through onboarding, health checks, and practical guidance. You will also translate technical security topics into decision-ready risk explanations and concrete actions for various stakeholders.

Responsibilities

• Evaluate and guide secure Azure architectures for new and existing workloads
• Perform project and architecture reviews; identify risks early and derive actionable recommendations
• Develop, maintain, and improve reusable security patterns, guidelines, and templates for Microsoft Azure
• Support application, service, and platform teams in complex or highly sensitive Azure initiatives
• Coordinate security topics with application owners, security, architecture/platform teams, compliance, data protection, outsourcing management, internal audit, and other control functions
• Turn Azure security topics into clear decision foundations, traceable risks, and concrete measures
• Conduct regular security health checks for existing Azure workloads and support implementation of improvements
• Deliver knowledge via trainings, enablement formats, recurring sessions (Jour Fixes), and ad-hoc consulting

Requirements

• Multi-year hands-on experience with Azure Security, ideally in enterprise-scale or regulated environments
• Strong technical expertise in Microsoft Azure security, including Entra ID/IAM, network segmentation, Azure Policy, Microsoft Defender for Cloud, logging, monitoring, encryption, Key Management, and secure landing zone concepts
• Experience with architecture and security reviews, risk assessment, and derivation of technical and organizational measures
• Knowledge of security-by-design and cloud governance and ability to integrate them into projects, architectures, and operating models
• Familiarity with information security and cloud governance frameworks such as BAIT and DORA (or ability to ramp up quickly)
• Experience coordinating technical and regulatory security topics with diverse stakeholders
• Consulting and enablement skills to explain complex cloud security matters and help teams implement secure solutions
• Hands-on, pragmatic, solution-oriented approach with a high quality standard
• German: very good; English: good (written and spoken)

Benefits

• Personal and professional development environment
• Modern talent management, flexible working hours, sabbaticals, and partial mobile work or home office
• Company pension provision, health management, Job-Rad/device leasing options, lunch offerings, and multiple daycare centers