Cloud Engineer (m/w/d)

THE OPPORTUNITY
As a
Cloud Security Engineer-Platform & Infrastructure
at NavVis, you will play a critical role in strengthening our cloud security posture, with a strong focus on
Kubernetes and AWS environments.
You will own and optimize our Wiz platform, implement security automation, and ensure compliance with ISO 27001 and SOC 2 standards. This is a hands-on role where you will collaborate closely with engineering teams to embed security into our infrastructure and processes.

How You Will Make An Impact

• Take ownership of Kubernetes security across our EKS clusters: design and enforce RBAC, admission controllers, network policies, and pod security standards
• Harden container workloads through image scanning, runtime threat detection, and workload identity best practices
• Own and continuously improve our cloud security posture using Wiz, AWS native services and internal monitoring
• Drive security automation and hardening across AWS, EKS and on-prem infrastructure
• Integrate security controls into CI/CD pipelines (Terraform, Helm, GitOps) to prevent misconfigurations early
• Design and maintain guardrails and detection rules for identity, network and workload security
• Design and enforce least-privilege IAM and support SSO and SAML workflows
• Partner closely with engineering teams to secure new services and architectural changes
• Lead vulnerability management and remediation across cloud assets, containers and applications
• Support risk assessments, internal security reviews and compliance initiatives (ISO 27001, SOC 2)
• Investigate and respond to security incidents, driving follow-up improvements
• Contribute to internal security standards, playbooks and documentation

What Will Help You Succeed In The Role

• Strong hands-on Kubernetes security experience you are comfortable with being the go-to person for Kubernetes security decisions.
• Experience hardening containerized workloads, including image scanning, runtime security and workload identity
• Strong hands-on experience with AWS security (IAM, KMS, networking, GuardDuty, Security Hub)
• Strong Terraform skills and an automation-first mindset
• Experience with CSPM and cloud monitoring tools (Wiz is a strong plus)
• Familiarity with ISO 27001 and SOC 2 control environments
• Experience designing and enforcing least-privilege access models and SSO integrations
• Confidence handling security incidents, investigations and documentation
• Excellent communication and cross-team collaboration skills

HOW WE WILL KNOW WE ARE A PERFECT MATCH
Your recruiting partner for this role is Sylvie (she/her). You can expect to go through a screening call, and up to 4 rounds of interviews, where we would love to discover your passion and interests, introduce you to who we are and what drives us, and finally understand how we can potentially add value to each other's growth.

How We Will Keep You Smiling

• It's important to take a break from work! We offer 30 days of paid time off per year
• Affordable access to a vast network of fitness and wellness facilities through EGYM Wellpass subsidy
• Deutschlandticket subsidy to support sustainable travel using public transport
• We offer flexible working hours and a hybrid work setup, enabling you to plan your work around your life, and not your life around work!
• We offer full visa and relocation support for international candidates
• An attractive bike leasing model through JobRad, in line with our commitment towards sustainable mobility
• A competitive compensation package that values the skills and experience you bring
• Up to 4000 EUR employee referral bonus
• Financial support for local language classes to help you in your journey of integrating into the culture!

We derive our strength from our diversity.
NavVis' unwavering commitment to fostering an inclusive and diverse workplace has laid the foundation for our incredible growth. We thrive on the collective strength of our people who come from diverse backgrounds. We respect and value every experience associated with race, gender identity, sexual orientation, nationality, religion and disability. We do not discriminate on the basis of any of these, or other identities, and strongly encourage everyone to apply.

Together with you, we build NavVis!
If you need assistance at any stage of the recruiting process due to a disability, please reach out to your recruiting partner(s) for this position.

Who will you join?
Global P&C is a Group Center of Allianz SE, based in Munich. Mandated to drive P&C profit enhancement globally, Global P&C supports operating entities (OEs) to develop a competitive advantage in their markets, to create a self-sustaining culture of improvement within the Allianz Group, to foster P&C talent development and to enhance Technical Excellence (TEX) in P&C. An international team with diverse backgrounds and extensive experience, Global P&C has 90+ colleagues from over 20 countries.

At Global P&C, the Climate Resilience Hub is being established to translate physical climate risk expertise, resilience testing and data-driven insights into practical outputs for Operating Entities (OEs) and business functions, with a focus on Retail/SME business. These outputs will support areas including underwriting, pricing, claims, communications and public affairs.

How can you make an impact?
As Building Construction Engineer & Climate Risk Expert, you will bring technical expertise on building resilience, physical climate risk and risk prevention measures. You will translate engineering insight into insurance-relevant actions, practical guidance and scalable outputs for Operating Entities and Global P&C stakeholders.

This role is an opportunity to shape a new global function from the ground up, not only execute existing processes. You will help define how engineering and prevention expertise can support the future insurability of climate risks, including practical standards, guidance and business steering logic for Retail/SME property risks.

The Main Tasks Of This Responsibility Are

• Assess physical climate and natural hazard risks from an engineering and prevention perspective, with a focus on buildings, assets and property portfolios
• Evaluate resilience and risk prevention measures, including technical feasibility, expected impact, limitations and relevance for insurance use cases
• Translate engineering findings into practical implications for underwriting guidelines, pricing differentiation, claims, risk selection logic and OE adoption
• Contribute technical input to prevention-linked product development and define practical standards for resilience assessment where relevant
• Work closely with peril-specific OE Centers of Competence for Climate Resilience and translate findings into globally scalable outputs
• Work closely with the climate scientists of the Center of Competence Natural Perils to merge engineering findings into our climate risk loss models
• Provide technical challenge on assumptions, evidence quality, output readiness and the practical feasibility of proposed resilience measures
• Drive alignment with data colleagues, business integration colleagues, internal experts and Operating Entity stakeholders so outputs are technically sound, usable and adopted
• Act as a reference expert across Global P&C and contribute to repeatable approaches, templates and knowledge assets that help scale resilience and prevention activity across Allianz Group

What are you made of?
Minimum Qualifications

• 5+ years of relevant professional experience in property risk engineering, loss control, property claims / loss adjusting, building construction engineering, NatCat-focused risk engineering, climate resilience risk consulting or a related internal role
• Strong understanding of physical climate risk, natural hazards, building vulnerability and prevention / mitigation measures
• Practical understanding of P&C property insurance, especially underwriting, pricing, claims, loss control or risk engineering; or the ability to develop this quickly
• Ability to translate technical findings into clear, actionable recommendations for non-technical stakeholders
• Analytical mindset with the ability to assess evidence, assumptions, limitations and practical feasibility
• Strong communication skills and ability to work across functions, geographies and stakeholder groups
• Fluent written and spoken English; German language skills would be beneficial

Preferred Qualifications

• Master's degree in civil engineering, building engineering, environmental engineering, industrial engineering, architecture, natural sciences or a related technical discipline
• Previous experience in insurance or asset management business functions, consulting, digital / tech is a plus
• Experience applying ChatGPT, Generative AI, and Ethical AI solution

Do we have what you need?

• Flexible and hybrid work model
• Multinational and inclusive community
• Great career development and learning opportunities
• Company pension and health insurance
• Employee stock purchase program with a discount
• Health and well-being offerings
• Supportive family care benefits
• Opportunity to contribute to our sustainability programs
• Great place to work certified

And there is much more
: Allianz SE Benefits

To learn about our recruitment process: Allianz SE Recruitment Process

Apply before:
30 August- Applications are reviewed on an ongoing basis and we reserve the right to withdraw the posting prior to the advertised closing date. So, if you're interested in this role we encourage you to apply as soon as possible.

In case of questions reach out to Mr. Nasir Mehrzad Balach: nasir.mehrzad-balach@allianz.de

Welcome to Allianz SE!
We at Allianz SE are recognized as a trusted partner for protecting and growing your most valuable assets, offering a comprehensive portfolio of products, including property and casualty insurance, life and health insurance, and asset management services, tailored to meet the various needs of individual and corporate clients worldwide. From our international headquarters, we orchestrate global operations, set strategic directions, and ensure cohesive implementation across our international subsidiaries. We are committed to innovation and digital transformation, driving initiatives that enhance customer experience and operational efficiency, reinforcing our position as a leader in the financial services industry.

For more about Allianz SE, Click Here.

#StandwithUkraine

People With Disabilities
We want to give all our candidates the best opportunity to succeed. If you need any adjustments to be made during the application and selection process, please email to RECRUITING-SERVICES@allianz.com

103862 | Operations | Professional | Allianz SE | Full-Time | Temporary

To Recruitment Agencies
Allianz SE has an in-house recruitment team that sources great candidates directly. Therefore, Allianz SE does not accept unsolicited resumes from agencies or search firm recruiters.

When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.

Please do not contact hiring managers directly.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Join us
. Let's care for tomorrow.

Successful candidates must be prepared to relocate to the specified job location in the job posting and will be employed directly under the hiring entity’s contractual terms.
Munich Re is a global market leader in re-insurance, global specialty insurance and digital solutions.
New technologies are disrupting the insurance value chain. Our innovative minds in IT spearhead the transformation and make change happen. We support clients with a comprehensive range of insurance and risk management products. Our goal is to become even more digital through the expertise of our IT & Tech specialists, and by leveraging data and insights to support innovation and client service. We are therefore making targeted IT investments and helping our insurance clients and partners to tackle problems in the modern digital world with innovative and forward-looking solutions.

This role will be part of the Enterprise Architecture Tower for Group Technology (IT1.5), which defines and drives the overarching Enterprise Architecture (EA) strategy to support business agility and growth across Munich Re Group. The Tower develops multiyear roadmaps covering platforms, products, digital experience, and organizational design—balancing strategic alignment and transformation goals. It ensures consistent policy, monitors architecture delivery, and optimizes the application portfolio to reduce costs and accelerate innovation. Additionally, the Tower provides SDLC tools and processes that enhance global developer productivity in a secure, compliant, and standardized environment.

As a Technical Architect for our Developer Platform Engineering initiative within Enterprise Architecture (EA SDLC), you design, build, and operate our internal developer platform. This platform provides developers with self-service access to standardized tools, services, and cloud infrastructure.

The goal of our DX Platform Engineering initiative is to improve the developer experience, reduce complexity, and accelerate software delivery across our developer community.

In the context of platforms we are responsible for—such as Global Developer Workplace, Backstage, GitHub Enterprise, and Spacelift/Terraform—this means providing a secure, standardized, and automated development environment for all developers within Munich Re.

Your Job

• Design and drive the Internal Developer Platform (IDP) as a product, ensuring scalable architecture, reusable standards, and clear “golden paths” for common development use cases
• Define and evolve platform architecture, reusable components, and interfaces to provide a consistent, integrated developer experience across infrastructure, toolchains, and services
• Enable self-service and automation capabilities by building standardized templates, APIs, and workflows for provisioning environments, CI/CD, and infrastructure
• Ensure platform reliability and continuous improvement, including monitoring, performance optimization, troubleshooting, and lifecycle management of platform services
• Enforce secure, compliant, and high-quality platform standards, embedding security-by-design, governance, and regulatory alignment into all platform components
• Collaborate with enterprise architects, developers, and operations teams to align platform designs with architecture standards, governance frameworks, and business needs
• Drive a platform-as-a-product mindset, continuously improving developer experience (DX) based on feedback and adopting AI-enabled engineering capabilities where beneficial
• Integrate and standardize toolchains and services (e.g., CI/CD, source control, observability, artifact management) into a unified platform ecosystem
• Analyze demand and align platform capabilities with enterprise architecture roadmap, ensuring scalable adoption and alignment with organizational strategy

Your Profile

• University degree, preferably in Computer Science, IT or similar field
• 3+ years of experience in a fast paced, global and regulated business environment and several years working on software development projects as a developer and architect and hence in-depth knowledge of the processes of the entire software development and product lifecycle
• Garnered knowledge of cloud / service-based architecture based on MS Azure technologies, Microservices.
• Experience with DevOps principles and best practices, preferably with Azure DevOps and Git - source control, branching, merging and code reviews.
• Experienced managing expectations when balancing alternatives against business and financial constraints and able to estimate the financial impact of architecture alternatives
• Demonstrated a strong proficiency in architectural standards, methodology and design, with the ability to conduct design reviews and lead process flow analysis and process re-design
• Willingness to travel as required in execution of responsibilities

Application Instructions
Please apply through our online portal and upload your CV, as well as your academic reference letters, including school certificates, graduation certificates and transcripts of record for any degrees. If applicable, please also submit reference letters from any previous employers or certificates from any other qualifications you may have. We recommend writing a cover letter to tell us more about why the position and Munich Re is of interest to you.

About Us
As the world's leading reinsurance company with more than 16,000 employees at over 50 locations, Munich Re introduces a paradigm shift in the way you think about insurance. By turning uncertainty into a manageable risk we enable fundamental change. Join us working on topics today that will concern society tomorrow, whether that be climate change, major construction projects, medical risk assessment or even space travel.

Together we embrace a culture where multiskilled teams dare to think big. We create the new and the different for our clients and cultivate innovation.

Sounds like you? Push boundaries with us and be part of Munich Re.

Our employees are our greatest strength. That’s why we offer them a wide range of benefits. You can find some examples below.

Unlock your potential

• Diversity, Equity & Inclusion: we embrace the power of differences and are convinced that diversity fosters innovation and resilience and enables us to act braver and better.
• Continuous Learning: we believe that continuous learning is a key differentiator and critical for building new skills and accelerating growth.
• Career Mobility: we actively support career mobility, and our strong global and regional presence offers a wealth of career growth opportunities for you.

Rewards & Recognition

• Competitive salary: appropriate compensation for your high level of commitment.
• Retirement provision: state of the art in-house pension solutions.
• Work-life balance: promoting the compatibility of family and work in addition to overall work-life balance.
• Health management: focus on your physical and mental health far beyond legal requirements.
• Hybrid working: living the best of both worlds – we offer you a very flexible approach as well as the opportunity to work from abroad on an occasional basis.
• Munich Re not only stands for fairness with regard to its clients; it is also an equal opportunities employer. Severely disabled candidates will also be prioritized, if equally qualified.

Münchener Rückversicherungs-Gesellschaft
Korbinian Rentsch

Talent Acquisition Partner

Sorge gemeinsam mit uns für die digitale Zukunftsfähigkeit der Bundeswehr.

Deine Aufgaben:

• Ganzheitliche Betreuung, Wartung und Weiterentwicklung unserer aktuellen E-Mail-Sicherheitslösungen auf Basis von Cisco ESA (Email Security Appliance) und Cisco SMA (Security Management Appliance)
• Konzeption, Planung, Dokumentation und technische Umsetzung anspruchsvoller Mailrouten, Regelwerke und Richtlinien (z.B. Message Filters, Content Dictionaries)
• Verantwortung für die Beantragungsprozesse, Validierung und sichere Umsetzung von Benutzerrechten und Postfachsteuerungen im E-Mail-Umfeld
• Intensive Nutzung von Microsoft Excel für das regelmäßige Reporting, die Analyse von Mail-Flow-Daten, die Auswertung von Statistiken sowie für die Massendatenverarbeitung bei Migrationen oder Audits
• Sicherstellung der E-Mail-Sicherheit (Spam-/Virenschutz, DLP) sowie die Implementierung und Pflege von Authentifizierungsstandards (SPF, DKIM, DMARC)
• Fehleranalyse und Behebung von Störungen im Mail-Traffic (Message Tracking, Log-Analyse) sowie 2nd/3rd-Level-Support bei komplexen Anfragen

Dein Profil:

• Erfolgreich abgeschlossenes Studium der Informatik, eine Ausbildung zum Fachinformatiker (m/w/d) für Systemintegration oder eine vergleichbare technische Qualifikation
• Tiefgehende, praxiserprobte Kenntnisse in der Konfiguration und Administration von Cisco ESA und Cisco SMA
• Fundiertes Know-how in E-Mail- und Netzwerkprotokollen (SMTP, TLS, DNS) sowie Erfahrung mit den gängigen E-Mail-Sicherheitsstandards (SPF, DKIM, DMARC)
• Erfahrung in der systematischen Benutzersteuerung, der Bearbeitung von Berechtigungsanträgen und im Identitätsmanagement (z.B. Anbindung via LDAP/Active Directory)

Wir bieten:

• Durch abwechslungsreiche und gesellschaftlich relevante Aufgaben gewährleisten wir den reibungslosen IT-Betrieb und die Digitalisierung der Bundeswehr
• Das Ziel eint uns. Dabei sind für uns ein wertschätzender Umgang miteinander sowie ein großer Teamgeist elementar
• Die Vergütung liegt zwischen 57.800 € und 84.680 €. Die tatsächliche Höhe wird basierend auf deinem Verantwortungsbereich sowie Erfahrungen und Kompetenzen festgelegt
• Wir bieten 30 Tage Jahresurlaub, 1 Brauchtumstag plus Optionen auf individuelle Anpassungen
• Über unsere Benefit-App erhält man ein monatliches Guthaben und kann sich zusätzlich Steuervergünstigungen auf Tickets für den ÖPNV sichern
• Wir ermöglichen Flexibilität, um Beruf und Privatleben in Einklang zu bringen, etwa durch mobiles Arbeiten oder Vertrauensarbeitszeit
• Wir unterstützen die berufliche und persönliche Weiterbildung durch individuelle Maßnahmen sowie einen kostenfreien Zugriff auf LinkedIn Learning
• Unser Jobradangebot ermöglicht das Leasing von bis zu 2 Fahrrädern