Arbeitgeber: K.D. Pharma Bexbach GmbH

_You want full ownership of a group's Azure and hybrid environment – not just tickets, but the architecture, the governance, and the direction it takes? Then help shape the infrastructure behind an international niche world leader in Omega-3 technology._

**Salary: €60,000 – 80,000 / year, depending on experience** | Permanent | Immediate start | Remote within Germany or Switzerland (proximity to our Bexbach site is a plus)

Why join us?

* Real ownership: you shape the Azure/hybrid environment, not just maintain it
* Remote-first role across Europe, with occasional touchpoints at our Bexbach site
* Small, hands-on team working closely with security, application teams, and sites worldwide
* Individual career and development opportunities in an internationally operating company

About us – in brief

Headquartered in Bexbach, KD Pharma Group is a mid-sized, internationally active company and one of the world's few manufacturers of Omega-3 concentrates with a purity of up to 99.5% – built on a sole focus on Omega-3 fatty acid research and technology development.

## Tasks

* **Infrastructure rationalisation:** simplify the server estate, on-premises and in Azure; retire or replace unsupported systems and reduce technical debt
* **Azure platform:** design, run, and improve the Azure and hybrid environment – compute, networking, storage, and identity through Microsoft Entra ID and Conditional Access; support the App Development team with the environments they need
* **Device management:** manage devices and applications group-wide through Intune, with consistent policies across sites
* **Application delivery:** decide the right delivery method for each application, starting with reducing reliance on Azure Virtual Desktop
* **Governance and cost:** establish clear standards, policies, and tagging across Azure; keep spend visible and under control
* **Resilience and monitoring:** ensure backup, disaster recovery, and monitoring are reliable, tested, and provide early warning of issues
* **Security partnership:** work with the security function to implement controls, keep servers patched, and resolve vulnerabilities as they're identified

## Requirements

Must-have

* Strong hands-on experience running Azure infrastructure: compute, networking (VNets, NSGs, VPN Gateway, ExpressRoute), storage, with PowerShell automation
* Experience managing on-premises Windows servers alongside Azure in a hybrid environment
* A track record of rationalising infrastructure and reducing technical debt (e.g. consolidating servers, replacing unsupported systems)
* Microsoft Intune at scale, including device enrolment and application deployment
* Microsoft Entra ID, Conditional Access, and MFA
* Backup, disaster recovery, and monitoring (Azure Backup, Azure Site Recovery, Azure Monitor)
* Confidence working across teams and sites, explaining technical choices to non-technical colleagues

Nice-to-have

* Azure Virtual Desktop, including migrating users and applications to other delivery methods
* Azure governance and cost management (Azure Policy, tagging, Microsoft Cost Management)
* Azure Arc for managing on-premises servers
* Working knowledge of Microsoft Defender for Cloud and Microsoft Sentinel
* Experience supporting development teams (e.g. Azure App Service, Azure DevOps, GitHub)
* Infrastructure as code (Bicep or Terraform)
* Experience in a regulated environment, such as GxP
* Microsoft certifications, such as AZ-104 or MD-102

## Benefits

* Remote-first within Germany or Switzerland
* Individual career and development opportunities in an internationally operating company
* Competitive compensation with Christmas and vacation bonuses
* Company pension scheme
* Free water and coffee
* Company products at employee prices
* Regular team events

Remote (Germany or Switzerland) | Immediate start | ⏳ Full-time

Send us your application, no need for a perfectly polished cover letter. We'll get back to you promptly.