Job
- Level
- Experienced
- Job Field
- IT, DevOps
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Dresden
- Working Model
- Onsite
Job Summary
In this role, you will structure and stabilize our Azure tenant by implementing governance standards, cost management, and RBAC models while continuously building a transparent and efficient cloud infrastructure.
Job Technologies
Your role in the team
- You will be responsible for sustainably structuring and stabilizing our Azure Tenant.
- In addition, you analyze an existing Azure environment, clean it up systematically, and develop a robust target structure for Management Groups, Subscriptions, Resource Groups, Ownership, and Lifecycles.
- You define binding standards such as naming conventions, resource allocation, and tagging guidelines, and ensure that these are not only documented but also technically enforced and adhered to in daily practice.
- In doing so, you establish governance guardrails (e.g., via Azure Policy/Initiatives), ensure compliance transparency, and implement a pragmatic process for exceptions that sensibly balances security and productivity.
- A central part of your role is cost management in accordance with FinOps fundamentals.
- You implement a consistent cost tagging logic that accurately allocates costs in a cause-and-effect manner and enables sustainable transparency (showback/chargeback capable).
- You set up budgets, alerts, and meaningful dashboards, establish regular review routines, and drive continuous optimizations.
- The goal is to make cost development visible early, identify deviations quickly, and enable teams to actively take responsibility for costs.
- You develop and implement a clear RBAC and Least Privilege model for Azure and translate it into processes that work for all teams.
- This includes structured onboarding/offboarding processes, regulated access requests, as well as the secure invitation and management of external accounts/partners.
- You work closely with Security and IT to implement access controls that are auditable, traceable, and aligned with the state of the art.
- You establish a robust Infrastructure-as-Code foundation, define standards for modules/templates, and ensure reusability, versioning, and traceable changes.
- You have a solid foundational understanding of DevOps and know how platform standards interact with CI/CD and Git workflows (e.g., Azure DevOps or GitHub Actions).
- Your focus is not primarily on operating pipelines, but on ensuring that platform governance, IaC, and operational standards are seamlessly integrated into the teams' delivery processes.
- You create clear documentation, runbooks, and guidelines that are used in everyday work and do not gather dust in wikis.
- You translate standards practically, moderate coordination with internal stakeholders, and ensure that the rules are transparent for everyone.
- In this role, you act as a hands-on platform enabler: structured, reliable, and committed to bringing order and sustainability to the Azure landscape.
- You also bring basic Microsoft 365 knowledge to implement cloud governance consistently end-to-end.
- In doing so, you ensure that Azure platform standards align with the M365/Entra ID fundamentals - especially in the areas of identities, groups, roles, and access controls.
- You assist with basic topics such as structured user and group management, roles/admin concepts, licensing fundamentals, and ensuring compliance with simple tenant guidelines (e.g., naming and group conventions, basic settings for collaboration).
- You work closely with the M365 responsible persons.
This text has been machine translated. Show original
Our expectations of you
Education
- You have a completed degree in a STEM field (e.g., Computer Science, Engineering, Mathematics) or a comparable qualification with relevant, verifiable practical experience in cloud/platform operations.
Qualifications
- You have FinOps-related knowledge and can implement Cost Management in a way that budgets, alerts, dashboards, and cost allocation work reliably.
- Additionally, you are proficient in RBAC models and access control within the Azure/Entra context, and you can design processes for account/partner onboarding that are secure and auditable.
- Infrastructure as Code is not just theory for you, but a lived practice - including clean repo structures, versioning, and PR-based change processes.
- Fundamentals of DevOps (Git, CI/CD principles) and a solid understanding of Microsoft 365/Entra contexts complete your profile, ensuring platform governance is considered end-to-end.
- You work in a structured, pragmatic, and solution-oriented manner and enjoy organizing established environments and designing standards in a way that they are accepted and utilized.
- You can bring together requirements from different stakeholders, communicate clearly and assertively, and at the same time be sufficiently service-oriented to empower teams rather than hinder them.
- You take responsibility, follow topics consistently through to implementation, and document in a way that others can build upon.
- You communicate confidently in German and English – both in daily coordination and in documenting complex technical content.
Experience
- You have extensive practical experience in Azure platform and tenant management and have already established or reorganized structures in real environments, introduced governance standards, and embedded them technically.
- You are very well-versed in Azure governance mechanisms (especially Azure Policy/Initiatives, compliance reporting, and pragmatic exception handling) and have experience with tagging/naming standards that work effectively even under time pressure and in multi-team setups.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics that you deal with on the job
Job Locations
This is your employer
sunfire GmbH
Als eines der innovativsten Unternehmen weltweit entwickelt und produziert Sunfire heute Anlagen zur Erzeugung von erneuerbaren technischen Gasen und Kraftstoffen. Diese Substitute für Erdöl und Erdgas ersetzen als e-Gas, e-Fuel oder e-Chemicals fossile Energieträger in bestehenden Infrastrukturen. Die für den Wandlungsprozess eingesetzten Festoxid-Zellen (solid oxide cells, SOCs) werden auch als Generatoren zur Strom- und Wärmeerzeugung genutzt.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Industry, Production, Power Sector, Economy
Cloud Engineer
- Location
- Dresden
- Working Model
- Onsite
- Diversity
- Open for all genders
