Pebio editorial team · Last updated: 31 October 2026

Cloud Security Engineer

What is on your mind?

Pay scales and minimum rates

These are minimums if the stated scope applies to your employment. This is not legal advice.

There is no verified statement on statutory pay under the BGB for this occupation yet.

Statutory minimum wage

  • Statutory

    €13.90 per hour

    valid from 2026-01-01, until 2026-12-31

    § 1 Nr. 1 MiLoV5: „ab 1. Januar 2026 13,90 Euro brutto je Zeitstunde“

Source: Fifth Minimum Wage Adjustment Ordinance (MiLoV5), Federal Law Gazette 2025 I No. 268 · As of 2026-10-27

Upcoming rates (1)
  • Statutory

    €14.60 per hour

    valid from 2027-01-01 · upcoming

    § 1 Nr. 2 MiLoV5: „ab 1. Januar 2027 14,60 Euro brutto je Zeitstunde“

Source: Fifth Minimum Wage Adjustment Ordinance (MiLoV5), Federal Law Gazette 2025 I No. 268 · As of 2026-10-27

Terms explained
Generally binding collective agreement (AVE)
A collective agreement that the labour ministry has declared binding for all employers in a sector – even without union membership.
Framework agreement (Manteltarifvertrag)
Sets general working conditions such as working hours, leave and notice periods, not the level of pay.
Pay agreement (Entgelttarifvertrag)
Sets how much is paid per pay grade.
Pay grade (Entgeltgruppe)
The classification by task and qualification. It decides which amount in the pay table applies to you.

Which pay scale might apply to you?

We show no sector pay scale for this occupation. Check step by step: region, employer and sector, bargaining parties, scope and period, then the original text. A match means “possibly relevant, please check”, not “applies to you”.

BMAS collective agreement register

Where else you can go

Routes many people do not think of straight away. Every statement names source and date; what is missing reads “not documented yet”.

  • Cloud Security Architect (design role)

    You design security architectures for cloud environments and set standards for teams. You assess risks of new services and support their rollout.

    Why you fit

    Your experience with cloud configuration, identities and network segmentation is the basis for architecture decisions.

    The route there

    Further training and exam
    not documented yet
    Duration
    not documented yet
    Cost
    not documented yet
    Funding
    not documented yet
    Salary
    not documented yet

    Your next step: Take on an architecture draft for a new service in your team and have it reviewed.

  • Information Security Officer (BSI IT-Grundschutz)

    You run an organisation's information security management system. You advise management, check controls and coordinate audits.

    Why you fit

    You know technical safeguards from practice and can turn requirements into concrete measures.

    The route there

    Further training and exam
    The IT-Grundschutz consultant is trained by providers such as TÜV NORD; you take the exam with the BSI.

    Source: TÜV NORD, IT-Grundschutz consultant seminar · As of 2026-10-31 (retrieved)

    Duration
    not documented yet
    Cost
    not documented yet
    Funding
    not documented yet
    Salary
    not documented yet

    Your next step: Read BSI Standard 200-2 and ask who holds the ISO role in your organisation.

  • Chamber-certified Information Security Specialist (IHK)

    You qualify through a nationally uniform IHK continuing-education exam for information security tasks. It shows your skills in risk analysis and security concepts.

    Why you fit

    You have cloud security practice and make it visible with a recognised qualification.

    The route there

    Further training and exam
    The exam is regulated nationwide by the InSiFPrV ordinance; it generally assumes at least 400 hours of learning. It is held by the competent body, for example the IHK.

    Source: InSiFPrV, §§ 1 and 2 · As of 2026-10-31 (retrieved)

    Duration
    not documented yet
    Cost
    not documented yet
    Funding
    not documented yet
    Salary
    not documented yet

    Your next step: Ask your IHK about exam dates and admission and look for preparation courses with training providers.

Show more routes (4)
  • Pentester or security advisor

    You test systems on assignment for weaknesses and describe risks in reports. You advise clients on countermeasures.

    Why you fit

    You know cloud misconfigurations from the defender side and can find them on purpose.

    The route there

    Further training and exam
    not documented yet
    Duration
    not documented yet
    Cost
    not documented yet
    Funding
    not documented yet
    Salary
    not documented yet

    Your next step: Practise in your own lab and document findings as a sample report.

  • DevSecOps engineer (pipeline security)

    You build security checks into build and deployment pipelines. You automate scans and policies as code.

    Why you fit

    You know infrastructure as code and cloud policies and bring security into development.

    The route there

    Further training and exam
    not documented yet
    Duration
    not documented yet
    Cost
    not documented yet
    Funding
    not documented yet
    Salary
    not documented yet

    Your next step: Add an automatic security scan to a pipeline in one of your projects.

  • Head of Information Security (CISO, leadership)

    You are responsible for security strategy, budget and reporting to management. You lead teams and steer risks.

    Why you fit

    Technical understanding from cloud practice makes your decisions sound.

    The route there

    Further training and exam
    not documented yet
    Duration
    not documented yet
    Cost
    not documented yet
    Funding
    not documented yet
    Salary
    not documented yet

    Your next step: Take on a sub-project with budget and reporting duties.

  • Master's degree in IT security or computer science

    You deepen your knowledge in cryptography, secure systems and research. You finish with an academic degree.

    Why you fit

    With work experience you can link theory and practice and open up research and specialist roles.

    The route there

    Further training and exam
    not documented yet
    Duration
    not documented yet
    Cost
    not documented yet
    Funding
    not documented yet
    Salary
    not documented yet

    Your next step: Compare module handbooks of several universities and clarify admission.

What matters to you

Choose what matters to you, if you like. We then show the matching facts about this job. There is no weighting, no rating and no overall score.

What matters to you? (optional, several possible)

Important to you

Without a selection you get a general orientation: salary, collective agreements, skills, career and knowledge are in the sections of this page. Choose above what matters to you and we will point you to the matching places.

How we assign facts
  • Financial situation: Salary, Pay scales
  • Security & predictability: Pay scales, Job market
  • Work environment & belonging: No data
  • Recognition & competence: Skills
  • Growth & self-determination: Career, Skills

Job market: what job ads ask for

Reliable data basis · Based on 214 ads with skills

Sought-after professional skills

  • Azure
  • Terraform
  • Kubernetes
  • AWS
  • CI/CD
  • Firewall
  • Backup
  • Ansible

Source: Stellenanzeigen (BA-Volltext) · As of 2026-11-01

Quick check with this target job

The quick check reads your CV with this job as the target. What it shows and where its limits are is explained on the result page.

Start the quick check

Next step: Deep Check

If you want to apply for a specific position, the Deep Check is our service for that. Price: €49.

Go to the Deep Check

Your research

What matters to you? (optional, several possible)

Your choice moves matching sections forward. It filters nothing out and does not favour any paid service.