
IT Security Architect – IAM, On-Premises
Posted Sep 8

Posted Sep 8
This is a fully remote position, open to applicants in Germany.
• Take ownership of the security target architecture and standards related to identities and on-premises infrastructure.
• Create reference architectures for IAM, on-premises Active Directory, hybrid Entra ID integration, and on-premises infrastructure.
• Develop concepts for hardening, tiering, least-privilege, security-by-design, and secure administration.
• Establish binding security standards, guidelines, and Architecture Decision Records (ADRs).
• Evaluate existing and proposed solutions, identify vulnerabilities, and implement appropriate measures.
• Provide guidance to technical teams on the secure execution of requirements.
• Choose appropriate IAM and security tools, offering functional support and oversight during their deployment.
• For future expansion: Formulate a reference architecture and standards for the secure separation and integration of OT/production systems at the Elmshorn location.
• Multiple years of experience in security architecture or identity/infrastructure security, with proven results.
• Comprehensive understanding of IAM concepts and processes, including role models, recertification, access rights reviews, and PAM.
• Advanced expertise in on-premises Active Directory, encompassing hardening and tiering, and knowledge of Microsoft Entra ID, including hybrid situations like Conditional Access and PIM.
• Familiarity with on-premises infrastructure and network security, covering segmentation and secure access.
• Capability to establish standards, offer cross-functional advice, and support the professional growth of colleagues.
• Organized and self-motivated approach to work.
• Proficient command of both German and English.
• Experience in, or a willingness to learn about, OT and production security.
• Attractive employee discounts on ESN & More products.
• Flexible working hours and options for remote work.
• Mobility and fitness subsidies, including Wellpass and the Deutschlandticket.
• Company pension scheme.
• Opportunities for workation and more.
CrowdStrike
Triumph Enterprises, Inc.
LaunchDarkly
Staffbase
Get handpicked remote jobs straight to your inbox weekly.