IT Security Architect – IAM, On-Premises

Posted Sep 8

This is a fully remote position, open to applicants in Germany.

📋 Description

• Take ownership of the security target architecture and standards related to identities and on-premises infrastructure.

• Create reference architectures for IAM, on-premises Active Directory, hybrid Entra ID integration, and on-premises infrastructure.

• Develop concepts for hardening, tiering, least-privilege, security-by-design, and secure administration.

• Establish binding security standards, guidelines, and Architecture Decision Records (ADRs).

• Evaluate existing and proposed solutions, identify vulnerabilities, and implement appropriate measures.

• Provide guidance to technical teams on the secure execution of requirements.

• Choose appropriate IAM and security tools, offering functional support and oversight during their deployment.

• For future expansion: Formulate a reference architecture and standards for the secure separation and integration of OT/production systems at the Elmshorn location.


⛳️ Requirements

• Multiple years of experience in security architecture or identity/infrastructure security, with proven results.

• Comprehensive understanding of IAM concepts and processes, including role models, recertification, access rights reviews, and PAM.

• Advanced expertise in on-premises Active Directory, encompassing hardening and tiering, and knowledge of Microsoft Entra ID, including hybrid situations like Conditional Access and PIM.

• Familiarity with on-premises infrastructure and network security, covering segmentation and secure access.

• Capability to establish standards, offer cross-functional advice, and support the professional growth of colleagues.

• Organized and self-motivated approach to work.

• Proficient command of both German and English.

• Experience in, or a willingness to learn about, OT and production security.


🏝️ Benefits

• Attractive employee discounts on ESN & More products.

• Flexible working hours and options for remote work.

• Mobility and fitness subsidies, including Wellpass and the Deutschlandticket.

• Company pension scheme.

• Opportunities for workation and more.

People also viewed

CrowdStrike1 day ago

Regional Sales Director, Cloud Security

AU flagAustralia, +1 more countryFull-timeCybersecurity / Security Engineer
ApplyView job
Triumph Enterprises, Inc.1 day ago

Configuration Management and Documentation Specialist – Federal Cybersecurity

US flagDistrict of Columbia, +1 more stateFull-timeCybersecurity / Security Engineer
ApplyView job
LaunchDarkly1 day ago

Product Security Engineer

US flagUnited States OnlyFull-timeCybersecurity / Security Engineer$116k – $159.5k/year
ApplyView job
Staffbase1 day ago

Principal Information Security Manager

DE flagGermany OnlyFull-timeCybersecurity / Security Engineer
ApplyView job
Comcast1 day ago

DevSecOps Engineer, Security Compliance

US flagUnited States OnlyFull-timeCybersecurity / Security Engineer
ApplyView job
AECOM1 day ago

Transit Safety Security Specialist

US flagNew Mexico OnlyFull-timeCybersecurity / Security Engineer$100k – $150k/year
ApplyView job

Never miss a great job!

Get handpicked remote jobs straight to your inbox weekly.

Trusted by 7,400+ designers