Senior Consultant Cloud Solution Architect (m/w/d)

In the role of Cloud Solution Architect (CSA), you will take on a senior leadership role at the intersection of cloud security, identity and access management, and cloud governance. You see the big picture – and combine technical depth, strategic thinking, and consulting skills.

Working closely with medium and large enterprise clients, you develop comprehensive cloud architectures that harmonize security, compliance, and operational readiness. You are responsible for architectural decisions, manage technical workflows, and are the point of contact for complex issues related to Microsoft-based cloud solutions.

You work in an experienced team, are responsible for the quality and consistency of architectural concepts, and support clients from strategy to sustainable implementation.

• Concept and responsibility for comprehensive cloud architectures with a focus on Microsoft Azure – considering security, IAM, governance, and compliance
• Development and evaluation of cloud security architectures in the context of Zero Trust, Least Privilege, and Defense-in-Depth
• Design and development of identity and access management concepts based on Microsoft Entra ID, including Conditional Access, PIM, and Identity Governance
• Consulting on cloud governance frameworks: creation of Landing Zones, Azure Policy, Management Groups, and subscription structures
• Development of compliance and security concepts in accordance with regulatory requirements (e.g., ISO 27001, BSI IT-Grundschutz, NIS2, DORA)
• Technical leadership in projects: management of workflows, analysis of code and architecture, and quality assurance
• Close collaboration with CISO organizations, cloud and security groups on the client side, as well as with internal consultants
• Creation of architectural concepts, decision-making recommendations, and technical documentation at the decision-maker and implementation levels

What you bring with you

• Minimum 5 years of professional experience in IT consulting or comparable technical roles, ideally with a focus on cloud technologies, security, or IAM
• Deep practical knowledge of the Microsoft Azure platform – especially in the areas of Identity (Entra ID), Security (Defender for Cloud, Sentinel), and Governance (Azure Policy, Management Groups)
• Experience in designing and implementing IAM architectures: SSO, Federation (SAML, OAuth2, OIDC), Privileged Identity Management, Identity Lifecycle Management
• Understanding of cloud compliance and regulatory frameworks, and their translation into technical control measures
• Strong conceptual thinking: ability to analyze, document, and clearly communicate complex technical interrelationships in a structured manner
• Client experience at the decision-maker and specialist levels – confident demeanor, presentation skills, and communication skills
• Very good knowledge of German and English (spoken and written)

Preferred

• Microsoft certifications, in particular: AZ-305 (Azure Solutions Architect Expert), SC-100 (Cybersecurity Architect Expert), SC-300 (Identity and Access Administrator Associate), or AZ-500 (Azure Security Engineer Associate)
• Experience with Microsoft Purview (Information Protection & Compliance), as well as Microsoft Sentinel as a SIEM/SOAR platform
• Knowledge of other cloud platforms (AWS, GCP) or multi-cloud environment management approaches
• Experience with Infrastructure-as-Code (Terraform, Bicep, ARM Templates) and DevSecOps practices
• Knowledge of ITIL, TOGAF, or other enterprise architecture frameworks
• Experience in regulated industries (e.g., financial services, healthcare, public administration)

Typical technologies and topics

• Microsoft Azure: Entra ID, Azure Policy, Management Groups, Landing Zones, Defender for Cloud, Microsoft Sentinel
• Identity & Access Management: SSO, Federation (SAML, OIDC, OAuth2), PIM, Conditional Access, Identity Governance
• Cloud Security Architecture: Zero Trust, Defence-in-Depth, CSPM, CIEM
• Cloud Governance & Compliance: Azure Policy, Regulatory Compliance Dashboards, ISO 27001, NIS2, DORA, BSI IT-Grundschutz
• Microsoft Purview (Information Protection & Data Governance)
• Infrastructure-as-Code: Bicep, Terraform, ARM Templates
• Active Directory / Microsoft Entra ID Connect (Hybrid Identity)
• DevSecOps, CI/CD integration of security tools

Your introduction at Comma

As a Senior Consultant, you possess in-depth knowledge and experience – this is what we build upon. Therefore, your onboarding focuses on the essentials: the right contacts, a deep understanding of our culture and working style, and orientation within our structures and decision-making processes. A structured exchange with experienced colleagues will help you quickly establish the right connections and feel at home in the company. At the same time, you will get to know our methods, processes, and Comma-specific approaches to work.

This way, you will quickly find the levers with which you can be effective at Comma and in client projects.

Our benefits

• You work on diverse projects at DAX companies and leading medium-sized enterprises.
• Innovative, interdisciplinary topics combine scientific depth with real practical relevance.
• You have plenty of room for your own ideas and can make independent decisions and take action.
• Flexible working hours, freedom to choose your work location, overtime compensation, and travel time reimbursement as working time give you the freedom to shape your work-life balance according to your own ideas.
• Fair fixed salary plus bonus, Jobrad, first-class equipment, and many other benefits complement your package.
• Individual training and career development programs accompany you throughout your time at Comma Soft.
• Experienced professionals and newcomers work side-by-side – supported by structured mentoring.
• Whether it's Gipfelis (monthly employee meetups), BBQs on the rooftop terrace, game nights, or summer festivals with your loved ones – we love to celebrate together and often.