Cloud Security Engineer (w/m/d) — die Mobiliar

Full description

This is what awaits you

As a member of an agile team, you help us to operate and develop a secure, stable and sustainable IT security infrastructure. You move in a modern hybrid cloud environment with AWS, Microsoft Azure and on-premises infrastructures. You make an important contribution to the secure networking of our cloud and on-premises platforms and actively shape the future cloud and cyber security landscape of Mobiliar.

This is what you do with us

As part of our IT Security Infrastructure team, you will be responsible for building, operating and further developing our hybrid network and security infrastructure. You’ll make sure that AWS, Microsoft Azure and our on-premises platforms are securely connected and operated reliably.

Together with our security architecture, platform and feature teams, you will continuously develop our hybrid infrastructure. We are increasingly relying on infrastructure as code, automation, CI/CD and modern cloud technologies to provide secure and reproducible platforms.

You will analyze the requirements of our internal customers and support projects and feature teams in the secure integration of their applications and services in AWS, Azure and on-premises environments. At the same time, you will actively contribute your experience to continuously improve our operational processes, monitoring solutions, security standards and automation.

This is what you bring with you

• computer science, business informatics or similar training
• Advanced training in cloud, network or IT security
• Professional experience in the operation of security infrastructures in on-premises and hybrid cloud environments
• Practical experience with AWS (e.g. VPC, Transit Gateway, Direct Connect, Security Groups and Network ACLs), as well as Microsoft Azure, Cloud Networking, Infrastructure as Code, Automation (e.g. Terraform, Ansible) and modern deployment processes
• Understanding cloud security concepts such as IAM, Least Privilege, Network Segmentation and Zero Trust
• Practical experience with DNS, DHCP, IPAM, DNS-SEC, DNS firewall and DDoS protection is advantageous
• Analytical, solution-oriented way of thinking, high willingness to learn and pleasure in working together in an agile, interdisciplinary environment
• Very good knowledge of German and English and willingness to take part in the pikett service

Working with us

A technically oriented team with a wide range of tasks around cloud, network and cyber security is waiting for you. Together we live an open and supportive way of working and actively shape the transformation of our infrastructure from classic on-premises platforms to a modern hybrid and multi-cloud landscape.

This is what we offer

Compatibility

We enable flexible working models and offer 20 weeks of maternity leave and 6 weeks of paternity leave, above-average family allowances and a sustainably financed pension fund.

Training and development

We offer a wide range of internal courses as well as participation in possible programmes abroad. For job-relevant, external training, we participate generously.

Advantages

Among other things, we offer you up to 25% discount, a half-tax subscription, discounts on mobile phones as well as free subscriptions with flat rate and discounts at cultural events.

Present

Further conditions of employment

go to link

Manager for Cookie Consent

When you visit a website, this information about your browser can be stored and retrieved - usually in the form of cookies. Since we respect your right to privacy, you may refuse certain cookies. However, blocking certain cookies may negatively affect your experience on the Site and the services we offer.

Necessary cookies

These cookies are necessary for the use of this website and cannot be deactivated.

Show more details

Providers Description Activated

SAP as service provider

We use the following session cookies, all of which are necessary for the functionality of the website:

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data center
• "JSESSIONID" is placed on the visitor's device during the session so that the server can identify the visitor
• "Load balancer cookie" (actual cookie name may differ) prevents a visitor from jumping from one instance to another

Requirements

• Ausbildung in Informatik, Wirtschaftsinformatik oder vergleichbare Ausbildung

  • Weiterbildung in Cloud, Network oder IT-Security von Vorteil

• Berufserfahrung im Betrieb von Security-Infrastrukturen in On-Premises- sowie Hybrid-Cloud-Umgebungen

• Praktische Erfahrung mit AWS (z.B. VPC, Transit Gateway, Direct Connect, Security Groups und Network ACLs), sowie Microsoft Azure, Cloud Networking, Infrastructure as Code, Automatisierung (z. B. Terraform, Ansible) und modernen Deployment-Prozessen

• Verständnis von Cloud-Security-Konzepten wie IAM, Least Privilege, Network-Segmentierung und Zero Trust

• Praktische Erfahrung mit DNS, DHCP, IPAM, DNS-SEC, DNS-Firewall sowie DDoS-Schutz von Vorteil

• Analytische, lösungsorientierte Denkweise, hohe Lernbereitschaft und Freude an der Zusammenarbeit in einem agilen, interdisziplinären Umfeld

• Sehr gute Deutsch- und gute Englischkenntnisse sowie Bereitschaft zum Pikettdienst

Questions about this listing