Senior Infrastructure & Security Architect

At Planon, The Senior Infrastructure & Security Specialist is a hands-on role focused on designing, building and continuously improving Planon’s internal infrastructure, cloud, identity and security environment. You will configure, deploy and troubleshoot Microsoft 365, Azure, hybrid infrastructure and modern workplace platforms, keeping them secure, scalable and resilient.

Combining technical expertise with governance and risk awareness, you will turn business continuity, security, compliance and operational needs into working solutions. You will define architecture and technical standards, implement and automate them, and support them in production across our growing SaaS and Shared Services environment.

What we can challenge you with:

• Design and review secure, scalable architecture across Azure, Microsoft 365, Entra ID, hybrid infrastructure and the digital workplace. 
• Translate business, security and operational requirements into technical designs, architecture decisions, standards and implementation roadmaps. 
• Define and embed security baselines, hardening measures, Zero Trust controls and secure-by-design patterns. 
• Lead complex infrastructure, migration, integration and transformation initiatives from strategy through implementation. 
• Assess technical changes and architecture proposals for risk, compliance, scalability, resilience and operational impact. 
• Automate infrastructure operations and lifecycle management using PowerShell, Terraform, Infrastructure as Code and relevant automation tooling. 
• Support complex incidents, problems and change management by investigating root causes, coordinating remediation and ensuring structural improvements. 

A company is nothing without its people. Our diverse group of employees is the beating heart of our business and the key to our collective success. To continue that success, you combine broad infrastructure and security expertise with the judgement to set direction and the practicality to make change happen. You communicate clearly, bring colleagues together and take ownership from architecture through remediation. 

•  Minium of 7 years of relevant experience in infrastructure, cloud, identity and/or security architecture. with experience in migrations.
• Demonstrable expertise with Azure (incl network) DevOps, Intune, Microsoft 365, Entra ID and hybrid infrastructure environments. 
• Experience with backup, disaster recovery and defining RTO/RPO requirements.
• Knowledge of Microsoft Defender, Sophos, Azure Monitor, Intune and vulnerability management.
• Strong knowledge of enterprise networking, Windows and Linux Server, Active Directory and virtualization with VMware.
• Working knowledge of IAM, SSO, RBAC, Conditional Access, enterprise applications, Secret/certificate management API's and Zero Trust principles. 
• Experience translating security and compliance requirements into implementable technical controls and operating practices. 
• Combine architectural ownership with hands-on troubleshooting of complex infrastructure or security issues, driving sustainable remediation. 
• Willingness to monitor continuity and implement improvements during standby shifts, including outside office hours.
• Professional fluency in English and willingness to work hybrid from our Nijmegen HQ at least two days per week.

• Experience with PowerShell, Terraform, Infrastructure as Code or comparable automation tooling. 
• Knowledge of ISO 27001, NIS2, SOC 2, C5 and GDPR-related infrastructure controls. 
• Relevant infrastructure, cloud or security education and certifications. 
• Experience in a growing SaaS, Shared Services or global enterprise environment. 
• Familiarity with TOGAF,  Microsoft Cloud Adoption Framework or Azure Well-Architected Framework.