Lead Cloud Security Engineer mit Schwerpunkt Azure Security Architecture & Enablement (m/f/d)

Reference number: 17886 - Location: Stuttgart, partly remote - Company: LBBW - Functional area: IT Services & IT Operations - Full time / part time: 100

LBBW is one of Germany's leading banks and is an innovative, international and sustainable company in the financial sector. We are a reliable bank and know what it means to change. Digitization, agility and efficiency are not only key words for us, but constant companions of our own development. For only those who walk themselves understand what it takes. We offer an environment that promotes personal and professional development. With more than 10,000 employees, we shape the future of the financial world - Together #NeuesSchaffen

We are IT infrastructure services and our name is program. The IT infrastructure of today and tomorrow is our Daily Business. In times of digital transformation, you have the chance to lay the foundation for the future cooperation of the entire bank and become a key player in the transformation of our company.

From the first day, the advertised site offers you the opportunity to introduce your personal skills and advance the design of the best digital offering.

What you do with us:

Design Azure Security: You evaluate, design and accompany secure Azure architectures for new and existing cloud workloads. In doing so, you bring your experience from concrete Azure conversions and make sure that safety requirements are technically feasible, comprehensible and effective. Affiliate Security-by-Design: You conduct project and architecture reviews, identify risks at an early stage and guide clear, feasible recommendations. So make sure that security is not supplemented afterwards, but is part of the solution from the very beginning. Developing cloud security scatters: you develop, care and improve reusable security scatters, guidelines and templates for Microsoft Azure. The aim is to provide audited standards that teams can safely, efficiently and consistently apply. First and Next Mover support: You support application, service and platform teams in new, complex or particularly sensitive Azure projects. You help them to properly classify security requirements and implement secure cloud solutions in a practical way. Professionally integrate stakeholders: you coordinate and moderate coordination with application managers, security departments, architecture and platform teams, compliance, data protection, outsourcing management, internal audit and other control functions. In doing so, you translate technical Azure Security topics into clear decision bases, understandable risks and concrete measures. Conduct security health checks: You regularly evaluate the safety situation of existing Azure workloads during operation, recognise the need for improvement and accompany the implementation of appropriate measures together with the responsible teams. Teams empower and advise: You pass on your knowledge in training, enablement formats, Jour Fixes and ad hoc consultations. You make Cloud Security understandable, applicable and connectable to different target groups.

What you should bring:

Multiannual practical Azure Security experience: You have already implemented or significantly accompanied security solutions in Microsoft Azure — ideally in complex corporate environments or in a regulated environment. Funded technical expertise in Microsoft Azure: You are sure to know about topics such as Microsoft Entra ID, Identity & Access Management, Network Segmentation, Azure Policy, Microsoft Defender for Cloud, Logging, Monitoring, Encryption, Key Management and Secure Landing Zone Concepts. Experience with architecture and security reviews: You can analyze Azure architectures in a structured manner, evaluate risks comprehensible and derive concrete technical and organizational measures. Understanding Security-by-Design and Cloud Governance: You know how security requirements are integrated into projects, architectures and operating models at an early stage — not only theoretically, but with a view to practical feasibility. Experience in regulated environments: Information Security, Cloud Governance, BAIT, DORA or comparable regulatory frameworks are familiar to you or you can move quickly and structured in it. Sovereign Stakeholder Communication: You have experience in tuning technical and regulatory security issues with application managers, security departments, compliance, internal audit, architecture, platform and operating teams — clear, binding and at eye level. Consultancy and enablement competence: You can explain complex cloud security topics in a comprehensible way, bring different perspectives together, and help teams implement secure solutions independently. Hands-on-Mindset: You don't stick to concepts, but bring standards, patterns and recommendations into actual application. You work solution-oriented, pragmatic and with a high quality standard. Nice to have: Experience with DevSecOps, Infrastructure as Code, CI/CD Security, Terraform, Azure DevOps or GitHub. In addition, knowledge in multi-tenant setups and in handling international requirements - especially in the international environment - are welcome. Relevant certifications such as AZ-500, SC-100, CISSP, CISM or CCSP complete your profile. Language: You have very good knowledge of German and good English in word and writing.

Modern talent management for career development Active promotion of a good reconciliation of work and private life (including flexible working hours, sabbaticals and the possibility to work in part on a mobile or home office) Attractive occupational pensions Comprehensive health management (e.g. cooperation with gyms, occupational medical service, preventive examinations) Interesting leasing possibilities, e.g. Job-Rad, Tablet, Smartphone Great lunch offers (bio, vegetarian or vegan) Several daycare centres