*You want full ownership of a group's Azure and hybrid environment – not just tickets, but the architecture, the governance, and the direction it takes? Then help shape the infrastructure behind an international niche world leader in Omega-3 technology.*
**Salary: €60,000 – 80,000 / year, depending on experience** | Permanent | Immediate start | Remote within Germany or Switzerland (proximity to our Bexbach site is a plus)
Why join us?
- 🎯 Real ownership: you shape the Azure/hybrid environment, not just maintain it
- 🌍 Remote-first role across Europe, with occasional touchpoints at our Bexbach site
- 🤝 Small, hands-on team working closely with security, application teams, and sites worldwide
- 📚 Individual career and development opportunities in an internationally operating company
About us – in brief
Headquartered in Bexbach, KD Pharma Group is a mid-sized, internationally active company and one of the world's few manufacturers of Omega-3 concentrates with a purity of up to 99.5% – built on a sole focus on Omega-3 fatty acid research and technology development.
## Tasks
- **Infrastructure rationalisation:** simplify the server estate, on-premises and in Azure; retire or replace unsupported systems and reduce technical debt
- **Azure platform:** design, run, and improve the Azure and hybrid environment – compute, networking, storage, and identity through Microsoft Entra ID and Conditional Access; support the App Development team with the environments they need
- **Device management:** manage devices and applications group-wide through Intune, with consistent policies across sites
- **Application delivery:** decide the right delivery method for each application, starting with reducing reliance on Azure Virtual Desktop
- **Governance and cost:** establish clear standards, policies, and tagging across Azure; keep spend visible and under control
- **Resilience and monitoring:** ensure backup, disaster recovery, and monitoring are reliable, tested, and provide early warning of issues
- **Security partnership:** work with the security function to implement controls, keep servers patched, and resolve vulnerabilities as they're identified
## Requirements
Must-have
- Strong hands-on experience running Azure infrastructure: compute, networking (VNets, NSGs, VPN Gateway, ExpressRoute), storage, with PowerShell automation
- Experience managing on-premises Windows servers alongside Azure in a hybrid environment
- A track record of rationalising infrastructure and reducing technical debt (e.g. consolidating servers, replacing unsupported systems)
- Microsoft Intune at scale, including device enrolment and application deployment
- Microsoft Entra ID, Conditional Access, and MFA
- Backup, disaster recovery, and monitoring (Azure Backup, Azure Site Recovery, Azure Monitor)
- Confidence working across teams and sites, explaining technical choices to non-technical colleagues
Nice-to-have
- Azure Virtual Desktop, including migrating users and applications to other delivery methods
- Azure governance and cost management (Azure Policy, tagging, Microsoft Cost Management)
- Azure Arc for managing on-premises servers
- Working knowledge of Microsoft Defender for Cloud and Microsoft Sentinel
- Experience supporting development teams (e.g. Azure App Service, Azure DevOps, GitHub)
- Infrastructure as code (Bicep or Terraform)
- Experience in a regulated environment, such as GxP
- Microsoft certifications, such as AZ-104 or MD-102
## Benefits
- Remote-first within Germany or Switzerland
- Individual career and development opportunities in an internationally operating company
- Competitive compensation with Christmas and vacation bonuses
- Company pension scheme
- Free water and coffee
- Company products at employee prices
- Regular team events
📍 Remote (Germany or Switzerland) | 📅 Immediate start | ⏳ Full-time
Send us your application, no need for a perfectly polished cover letter. We'll get back to you promptly. 🚀