Cloud Engineer – Microsoft Azure (all genders)

You implement Azure environments so they can be provisioned transparently and operated securely. The focus is on infrastructure, identity, automation and controlled changes. You work with architecture and customer teams on production environments rather than isolated portal configurations.

Subscriptions, resource groups and Entra ID roles must align with clear responsibilities. You implement private endpoints and name resolution and verify actual access paths. Terraform or Bicep makes changes reproducible; Azure Policy checks agreed rules. Azure Monitor, Log Analytics and Backup are aligned with operational scenarios. For hybrid applications, you also test connectivity to the existing data centre.

• Provision Azure resources through infrastructure as code and automate deployments with clear review and approval steps.
• Implement networks, private connections, Entra ID integrations and access roles for the relevant environment.
• Configure policies, monitoring, backup and recovery in accordance with the agreed operating model.
• Provide technical support for migrations and systematically analyse incidents, resource bottlenecks and misconfigurations.
• Implement Azure RBAC, managed identities and policy requirements according to the principle of least privilege.
• Secure private endpoints, DNS resolution and hybrid network paths through transparent tests.

What matters is demonstrable experience that is relevant to the role. It may come from appropriate vocational training, a degree, professional practice or a well-founded career change. We will align the specific level of responsibility with your knowledge and experience.

• Practical experience with Microsoft Azure and its infrastructure and identity services.
• Knowledge of Terraform, Bicep or a comparable IaC toolchain.
• Understanding of networks, permissions and traceable operational changes.

This knowledge is helpful, but you do not need to have all of it at once. In your application, describe where you have already gained practical experience and which areas you would like to explore in greater depth.

• Experience with Azure Kubernetes Service, hybrid connections or automated landing zones.
• Relevant vendor certifications or experience with Azure Policy and cost analysis.

You deliver reproducible Azure environments with verifiable access rules and usable operational documentation. Changes can be explained using code and metrics rather than referring only to manual settings.

This role can be based in Cologne or performed remotely. We will agree the specific form of collaboration, project requirements and any necessary customer appointments before you start.

This role is offered as permanent employment on a full-time or part-time basis. We will agree the responsibilities, working hours, start date and compensation to suit the role and your level of experience.

Show us in your application which experience or interests you bring to this role. A CV and relevant project examples, certificates or work samples will help us assess your professional background. Please do not send confidential customer data, credentials or protected source code.

Tell us your preferred working model, your possible start date and whether you would like to work full-time or part-time.

If you have questions about the role, contact our recruitment team at hr@otoko.com. Inclusion in the applicant pool is voluntary and takes place only with separate consent; it is not a prerequisite for reviewing your application.