(Senior) Cloud Security Architect (m/f/x)

Senior Cloud Security Architect (m/f/x)

Full-time

Scalable Capital is a leading digital investment and banking platform with a full banking licence, empowering people across Europe to shape their own finances. The company offers professional investment services for stocks, ETFs, cryptocurrencies, derivatives, and savings plans, complemented by attractive interest rates, loans, and private equity products. With more than €30 billion under management, Scalable Capital serves over one million clients across Europe.

What you’ll do

• Architect Cloud Foundations – Support the strategy for our core AWS environment, including multi‑account structure, network security patterns (TGW, VPCs), and IAM at scale.
• Secure the Software Development Lifecycle – Embed security into every stage of development, define container security standards, secure CI/CD pipelines with policy‑as‑code, and promote secure IaC modules.
• Lead Threat Detection and Response – Design and implement cloud threat detection and monitoring strategies; act as the primary technical expert for cloud security incidents.
• Govern Data Protection and Encryption – Establish enterprise data‑security strategy, define standards for KMS, data discovery, and service‑specific encryption controls.
• Drive Governance, Risk, and Enablement – Translate compliance requirements (ISO 27001, SOC 2, etc.) into actionable cloud controls; lead threat modelling and architecture reviews.
• Evaluate and Integrate Security Tooling – Lead the selection and integration of modern cloud security platforms (CNAPP, CSPM, CIEM) to deliver measurable value.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• Extensive experience designing and operating AWS infrastructures at multi‑account scale.
• Proven ownership of AWS org‑level controls (Control Tower, SCPs, SSO/IAM Identity Center, CloudTrail, Security Hub, GuardDuty).
• Deep hands‑on expertise with IAM, KMS, VPC/TGW, PrivateLink, Route 53, WAF/Shield, S3 security.
• Strong IaC skills (Terraform preferred; CloudFormation/CDK acceptable) and CI/CD integration (GitHub Actions, GitLab, Jenkins).
• Solid experience with EKS security (IRSA, PSP/PSS, network policies, admission control with Kyverno/Gatekeeper) and container supply‑chain fundamentals.
• Experience building policy‑as‑code guardrails that block risky changes pre‑merge.
• Competent in at least one programming language (Python or Go) plus shell scripting, capable of writing small tools and automations.
• Excellent stakeholder communication and documentation skills.

Benefits

• Work in one of Europe’s fastest‑growing fintech startups, creating innovative services that impact millions of customers.
• Diverse, inclusive, and international team environment.
• Office locations in Munich or Berlin, with flexible remote options within Germany.
• Latest hardware and tools to support productivity.
• In‑house knowledge sharing and career development sessions with an individual Education Budget.
• Free German language classes and support for cultural integration.
• International relocation support if required.
• Flexible vacation policy and the opportunity to work from abroad.
• Competitive compensation package, company pension scheme, and monthly contribution to the ‘Deutschland Jobticket’ (50%).
• Complimentary subscription to Scalable Capital’s PRIME+ Broker and access to Urban Sports Club discounts.

#J-18808-Ljbffr