Job
In this role, you will manage architecture backlogs, develop security architectures for platforms, and define standards for observability and automation following best practices.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- Own the architecture backlog: You are responsible for our platform architecture backlog, prioritize it together with Product Management and Engineering, and incorporate it into the planning cycles of our scaled collaboration—turning architectural goals into concrete deliverables.
- Shape and define platform architecture: You develop the target vision and roadmap for our platforms—private cloud solutions such as VMware Cloud Foundation, container and Kubernetes platforms such as Red Hat OpenShift, public cloud solutions such as Google Cloud, and identity and privileged access management systems such as Entra ID—make technology decisions, and document them transparently.
- Security by Design: You are responsible for the security architecture of our platforms and ensure that security is built in from the outset—with reference architectures, guardrails, and secure default configurations for identities and privileged access, network segmentation, encryption, and logging.
- Hardening in accordance with recognized standards: You define baselines based on CIS Benchmarks and platform vendors’ best practices, align them with the BSI IT-Grundschutz and regulatory requirements such as NIS2, and ensure their automated implementation and verification.
- Stable, sustainable, and cost-effective in the long term: You assess architectural decisions across their entire lifecycle—stability, sustainability, and cost efficiency go hand in hand for you.
- Together with the system architects: You work closely with our system and solution architects to ensure that our IT services, such as OSS, BSS, and ERP, run on secure platforms and leverage their security mechanisms from the outset.
- Keep availability and performance in check through automation: You define standards for observability, service level objectives, and automation—with Infrastructure as Code, GitOps, and Policy as Code—and implement them together with Platform Engineering and IT Operations.
- Coordination with the engineering teams: You are the central point of contact for Platform and Software Engineering, Security, and Operations, bringing stakeholders together around a shared, sustainable architecture.
Our expectations of you
Education
- Completed degree in computer science, business informatics, engineering, or a comparable qualification, along with several years of experience in platform or infrastructure architecture, including several years in an architecture role with responsibility for security-critical platforms.
Qualifications
- Expertise in observability (e.g., OpenTelemetry, Prometheus), as well as SLO-based operations, capacity planning, and lifecycle planning.
- Strong communication and decisiveness—you explain architectural decisions clearly, from engineering teams to senior leadership, and work in a structured, self-directed, and solution-oriented manner.
- Very good German and English skills.
Experience
- In-depth hands-on experience with at least two of the following platform types: private cloud (e.g., VMware Cloud Foundation), container and Kubernetes platforms (e.g., Red Hat OpenShift), public cloud (e.g., Google Cloud), and identity and privileged access management systems (e.g., Entra ID).
- Experience with hardening standards such as CIS Benchmarks and CIS Controls, as well as platform vendors’ best practices, ideally implemented through automation (e.g., Ansible, Terraform, GitOps, Policy as Code); experience in scaled agile organizations—SAFe or LeSS—and working with a dedicated backlog in planning cycles.
- In-depth knowledge of security architecture—Zero Trust, Least Privilege, Defense in Depth, Secure by Default, and threat modeling—as well as familiarity with regulatory requirements such as NIS2, ISO 27001, or the BSI IT-Grundschutz; experience in the telecommunications sector is a plus.
- Ideally, you hold relevant certifications; practical experience is what matters most—for example, CKA, CKS, or KCSA from the Linux Foundation, Red Hat Certified System Administrator or Architect in OpenShift, VCP or VCAP-VCF Architect, Google Professional Cloud Architect, or Professional Cloud Security Engineer.
What we offer
- Our portfolio is tailored to your needs—whether for work, insurance and retirement planning, or your free time. We offer a wide range of additional benefits!
- You’ll benefit from these and many other perks:
Benefits
Health, fitness & fun
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Die Unternehmensgruppe Deutsche Glasfaser mit Hauptsitz in Borken (NRW) plant, baut und betreibt anbieteroffene Glasfaser-Direktanschlüsse für Privathaushalte und Unternehmen. Sie engagiert sich bundesweit privatwirtschaftlich für die Breitbandversorgung ländlicher Regionen. Mit innovativen Planungs- und Bauverfahren realisiert Deutsche Glasfaser in enger Kooperation mit den Kommunen FTTH-Glasfasernetze schnell und kosteneffizient – auch im Rahmen bestehender Förderprogramme für den flächendeckenden Breitbandausbau.
- 2011
- Established Company
- Onsite, Hybrid
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
