مهندس معماري لأمن السحابة (BSI C5)

الوصف الكامل متاح باللغة الإنجليزية، ويمكنك التقديم بلغتك.

About the role

Public bodies, hospitals and financial firms in Germany want the benefits of cloud services but must show where data lives and who can reach it. This role designs platforms that meet those conditions. You define landing zones, identity models and key management on AWS, Azure, Google Cloud and German sovereign providers, and you map them to BSI C5 criteria. You work with our DevSecOps engineers, governance consultants and client platform teams from first design through to audit.

What you will do

• Design landing zones, network topologies and identity models for regulated cloud workloads
• Define encryption and key management concepts, including customer-managed and external keys
• Map platform controls to BSI C5, ISO 27017 and sector requirements and prepare audit evidence
• Set preventive and detective guardrails as code with the client platform team
• Assess cloud provider contracts and shared responsibility from a security point of view

What you bring

• 7+ years in IT infrastructure or security, at least 3 of them designing cloud platforms
• Deep knowledge of at least one of AWS, Azure or Google Cloud, plus awareness of sovereign alternatives
• Practical experience with Terraform or a comparable infrastructure-as-code tool
• Good understanding of identity federation, PKI and key management
• Experience preparing evidence for C5, ISO 27001 or SOC 2 audits

Good to have

• Professional-level cloud security certification (e.g. AWS Security Specialty, AZ-500, CCSP)
• Experience with STACKIT, IONOS or Open Telekom Cloud
• Knowledge of the EUCS scheme

Languages

English (C1), German (B1) an advantage

Skills

• BSI C5
• Cloud architecture
• AWS
• Azure
• Terraform
• Key management
• IAM
• ISO 27017