{"id":1855561,"url":"https://alion.io/job/jenoptik-cloud-security-architect-wmd","title":"Cloud & Security Architect (w/m/d)","company":{"id":51761,"name":"Jenoptik","domain":"jenoptik.com","url":"https://alion.io/company/jenoptik","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Monheim am Rhein, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":81000,"max_usd":198000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":617},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"Apache Kafka","optional":false},{"name":"API Gateway","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"C#","optional":false},{"name":"Calico","optional":false},{"name":"CI/CD","optional":false},{"name":"Cilium","optional":false},{"name":"Docker","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"RabbitMQ","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Microsoft Defender for Cloud","optional":true},{"name":"Microsoft Entra ID","optional":true}],"status":"live","first_seen_at":"2026-09-16T12:00:00Z","employer_posted_date":null,"last_verified_at":"2026-09-16T12:00:00Z","board_verified":false,"closed_at":null,"days_open":31,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":31},"description":"Jenoptik is an international photonics group with representatives in over 80 countries. Optical technologies are the foundation of our business. We employ around 4,000 people worldwide.\nJob Description:\nWe are seeking an experienced Cloud & Security Architect to join our team and lead the architecture, resilience, and security posture of our enterprise application platform. In this role, you will bridge the gap between Azure Cloud Architecture, Security Engineering, and Modern Application Development.Our application suite is built with C# and .NET and is deployed across a hybrid environment spanning Microsoft Azure, On-Premises infrastructure, and Docker / Kubernetes (K8s). Because our application is exposed directly to the public internet, ensuring robust security - ranging from edge defense and zero-trust networking to secure coding practices and container hardening - is at the core of this role.\nResponsibilities:\nDevSecOps Culture & Mentorship:\nDrive and cultivate a security-first and DevOps-oriented culture across software engineering and infrastructure teams\nLead hands-on workshops, establish security excellence programs, and mentor developers on secure coding and automated operational practices\nPublic Internet Security & Perimeter Defense:\nDesign and enforce edge protection strategies (Azure Front Door, WAF, Application Gateway, DDoS Protection) for all internet-facing APIs and services\nEnforce Zero-Trust Network Architecture, strict IP/GEO filtering, rate-limiting, and modern API security protocols (OAuth2, OIDC, mTLS)\nDevOps & CI/CD Security Governance:\nArchitect, standardize, and help maintain secure CI/CD pipelines (Azure DevOps)Own automated Infrastructure as Code (IaC) deployment workflows\nEmbed continuous security gates (SAST, DAST, dependency scanning, secret detection) into the build and release lifecycle\nAzure & Hybrid Cloud Architecture:\nArchitect and maintain cloud infrastructure in Azure aligned with cloud security best practices and the Microsoft Well-Architected Framework\nDesign secure hybrid connectivity between Azure, on-premises data centers, and containerized environments using Azure Arc, ExpressRoute, and VPN gateways\nContainer & Kubernetes Security:\nDefine and enforce security controls across containerized workloads (Docker, AKS, and On-Prem Kubernetes)\nImplement pod security standards, network policies (Calico/Cilium), image scanning, and container runtime threat detection\nSecurity Operations & Governance Execution:\nCoordinate and execute recurring security governance best practices, including regular user access reviews (IAM/PIM audits), cloud application security assessments, penetration testing, and automated policy compliance across all hybrid environments\nTechnical Requirements Ownership & Documentation:\nTake ownership of translating technologically-heavy business and product goals into detailed technical requirement specifications, system design docs, and architectural decision records (ADRs)\nCollaborate closely with Product Owners and Developers to define, document, and manage technical user stories and acceptance criteria\nQualifications & Requirements:\nEducation:\nBachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related field required (as the baseline requirement)\nMaster's degree in Computer Science, Cybersecurity, or Information Technology strongly recommended\nWork Experience: 7+ years of experience in Cloud Architecture, Cybersecurity, and/or DevSecOps roles\nExecution & Drive: Self-motivated, hands-on practitioner with a \"doer\" mentality, taking strong personal ownership and pride in the quality, security, and elegance of technical deliverables\nTechnical Leadership: Proven ability to lead, mentor, and inspire engineering teams to continuously raise the bar and strive for excellence\nPublic Internet Exposure: Hands-on experience defending public-facing, internet-exposed applications against threats (e.g., volumetric DDoS, credential stuffing, API abuse, SQLi)\nAzure Technical Stack: Strong practical knowledge of Microsoft Azure services and security tools (Defender for Cloud, Microsoft Entra ID, Azure Key Vault, Azure Policy, Network Security Groups, Private Endpoints)\nDevOps Architecture & Infrastructure as Code (IaC): Experience in driving automated infrastructure provisioning, continuous deployment, and telemetry across hybrid Azure, on-premises, and Kubernetes environments, ensuring zero-downtime deployments, high availability, and operational resilience\nSoftware & Distributed Architecture Expertise: Strong background in software architecture with proven experience designing and securing microservices architectures. Solid understanding of distributed systems, event-driven messaging systems (e.g., RabbitMQ, Kafka, Azure Service Bus), data persistence patterns, and API gateway integrations\nCertifications (Associate & Expert level welcome)\nMicrosoft Azure Associate Certifications (Preferred/Targeted): Azure Security Engineer Associate (AZ-500), Azure Administrator Associate (AZ-104), Azure Developer Associate (AZ-204), Azure Network Engineer Associate (AZ-700)\nExpert / Industry Certifications (A plus): Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Certified: Azure Solutions Architect Expert (AZ-305), Certified Kubernetes Security Specialist (CKS) or CISSP","description_format":"text","description_chars":5346,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Semiconductor Equipment","Optics & Photonic Components"],"lifecycle":[{"event":"open","at":"2026-10-04T20:11:52Z"}],"visa":[],"liveness":{"score":34,"band":"fade","label":"Fading","p_open":0.6,"p_active":0.763,"p_room":0.75,"age_days":30,"expected_fill_days":36,"reasons":["seen:30","win:late"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/jenoptik-cloud-security-architect-wmd","json_url":"https://alion.io/job/jenoptik-cloud-security-architect-wmd.json","meta":{"generated_at":"2026-10-18T00:57:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1602,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51761},"rest":"https://alion.io/mcp/rest/get_company?id=51761"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjenoptik-cloud-security-architect-wmd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjenoptik-cloud-security-architect-wmd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjenoptik-cloud-security-architect-wmd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jenoptik-cloud-security-architect-wmd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjenoptik-cloud-security-architect-wmd"}]}