Cloud Engineer

What will you be doing?

As a Cloud Engineer within the Cloud team (IT4IT), you play a key role in BNG Bank’s digital transformation. You are responsible for designing, implementing, and optimizing our modern hybrid cloud platform based on Microsoft Azure. By using cloud-native technologies such as Azure Kubernetes Services (AKS), Azure Integration Services (API Management, Service Bus), and advanced security solutions like Azure Firewall, Web Application Firewall (WAF), Azure Front Door, Application Gateway, and private PKI for certificate management, you ensure a scalable, highly secure, and well-integrated IT infrastructure.

You provide self-service capabilities to DevOps teams and support them in working autonomously within the cloud platform. With Infrastructure as Code and automated CI/CD pipelines, you contribute to an agile and efficient cloud environment that enables seamless integration between systems, protects the bank against cyber threats, and accelerates innovation.

• Designing and further developing cloud-native solutions with Infrastructure as Code (Bicep, Terraform) via Azure DevOps and GitHub.
• Implementing and managing container-based workloads on Azure Kubernetes Services (AKS).
• Setting up and maintaining an automated CI/CD pipeline landscape for fast and secure deployments.
• Implementing zero-trust security architectures with Azure Firewall, WAF, Front Door, and private PKI for certificate management.
• Managing Azure Entra ID: App Registrations, Conditional Access policies, and Single Sign-On (SSO) for secure access to cloud resources.
• Managing and providing Azure Integration Services (API Management, Service Bus) as a platform for development teams.
• Enabling DevOps teams through self-service cloud capabilities and platform engineering principles.
• Acting as an Azure subject-matter expert and sharing knowledge with DevOps teams.
• Proactively monitoring, optimizing, and troubleshooting the cloud environment with a focus on performance, cost, and security.
• Contributing to cloud governance, compliance, and security policies within financial regulations.
• Participating in the incident management process and taking one week of on-call duty per month.
• Continuously improving the cloud proposition by evaluating new Azure services and proposing innovative solutions.

Your workplace

Our Cloud (IT4IT) team is part of the Enabling IT department, which is responsible for providing a suitable, modern, and secure workplace. Enabling IT also ensures that systems run optimally on the appropriate platforms and integrate well with each other. The department further provides support for a robust, resilient, and secure IT environment that can respond effectively to (cyber) security incidents.

The Cloud team (IT4IT) is responsible for delivering the cloud platform for BNG Bank. The team also serves as the Azure competence center for teams within IT Delivery. It consists of five employees led by a team lead. The team applies an Agile (Scrum) way of working with DevOps principles.
The team's core values are:

• Expertise with vision
• Engaged partner of IT Delivery
• Helpful
• Robust

What we ask of you

• Bachelor’s or Master’s level of education.
• At least 3–5 years of hands-on experience with Microsoft Azure in an enterprise environment.
• In-depth knowledge of Azure cloud-native services such as AKS, Azure Firewall, Application Gateway, Front Door, and API Management.
• Experience with Infrastructure as Code tools (Bicep, Terraform) and modern CI/CD practices via Azure DevOps and/or GitHub Actions.
• Practical knowledge of containerization and orchestration with Docker and Kubernetes is a plus.
• Experience with Azure Entra ID, Conditional Access, and Identity & Access Management principles.
• Knowledge of Azure security best practices, zero-trust architectures, and compliance frameworks (NIST, DORA, CIS).
• Experience with scripting and automation (PowerShell, Azure CLI, Python).
• One or more relevant Azure certifications (e.g., AZ-104, AZ-305, AZ-500) or the ambition to obtain them.
• Affinity with the financial sector and understanding of regulatory requirements is a plus.
• Experience with platform engineering and enabling development teams.

Competencies

• Analytical and structured working style
• Interest in both the big picture and the details
• Proactive attitude focused on continuous learning and improvement
• Clear and effective communication
• Customer-oriented and team-oriented
• Quality is your top priority

What do we offer?

What can you expect when you come to work at BNG Bank? You will be working for a sustainable and societal conscious bank, where the interests of our customers are paramount in everything we do. We do this together, with each other and with our customers. We connect, develop as people and professionals, and value you for who you are and what you contribute. The work we do is special, but we remain modest. This is what we pride ourselves on. We are a reliable employer with a clear mission. With us, you can deliver outstanding performance and you will be given a lot of responsibility right away. Of course, you can also count on good working conditions, such as:

• A competitive salary from 4618 euro to 8549 euro gross month. Salary will be determined based on education and experience.
• A 13th month and 8% holiday allowance (paid monthly);
• Hybrid working. You will receive a home office compensation of €750 every 5 years and an expense allowance for working from home of €4 per day worked;
• Travel allowance of €0.23 per kilometre and full reimbursement of public transport costs based on second class travel;
• Personal development opportunities via our Archipel training platform. We believe it is important that you continue to develop, which is why you can make unlimited use of this platform;
• 216 hours of holiday per year based on a 36-hour working week and the option to buy and sell hours;
• A sports allowance worth €400 net per year;
• A bicycle plan worth €3,000 per 3 years;
• Free chair massages, boot camp/yoga;
• Once every 7 years, you can take two consecutive months of vitality leave.

And much more... discover it for yourself!

More information

If you have any questions about the position or the application procedure, please contact Martin Ipenburg, Corporate Recruiter, +31 653153718 or via werkenbij@bngbank.nl

Procedure

Our selection procedure consists of a telephone introductory interview with the recruiter and a maximum of two selection interviews, followed by a proposal of terms of employment. In accordance with our recruitment and selection policy, internal candidates will be given priority if equally suitable. A pre-employment screening is part of the application procedure.

No unsolicited acquisition

In order to submit CVs to BNG Bank N.V., an external recruitment agency must have entered into an agreement to this effect with BNG Bank N.V. Whereby, a CV may only be submitted if the agency has been invited to assist in the search for suitable candidates for a particular position. BNG Bank N.V. will not treat any unsolicited CVs submitted outside these conditions as direct applications from the candidate. An agency that sent the unsolicited CV cannot derive any rights from the foregoing. BNG Bank N.V. is not liable for any placement fees or any other compensation. Unsolicited CVs will not be returned by BNG Bank N.V.