IT Security Architect – IAM, On-Premises

This is a fully remote position, open to applicants in Germany.

📋 Description

• Take ownership of the security target state and standards for identities and on-premises infrastructure.

• Create reference architectures for IAM, on-premises Active Directory, hybrid Entra ID integration, and on-premises infrastructure.

• Develop security target states along with reference architectures.

• Establish binding security standards, guidelines, and Architecture Decision Records (ADRs).

• Define principles for least-privilege, tiering, and security-by-design.

• Conduct risk assessments and architecture reviews to derive suitable measures.

• Offer technical guidance to engineering teams for secure implementation.

• Choose appropriate IAM and security tools, providing expert support while overseeing their deployment.

• No operational implementation; execution is managed by specialized teams.

⛳️ Requirements

• Several years of experience in security architecture and/or identity and infrastructure security, with proven results.

• Strong understanding of IAM concepts and processes, including role models, recertification, access-rights reviews, and PAM.

• Extensive knowledge of on-premises Active Directory, including hardening and tiering, as well as Microsoft Entra ID, focusing on hybrid scenarios like Conditional Access and PIM.

• Insight into on-premises infrastructure and network security, encompassing segmentation and secure access.

• Capability to establish standards, provide cross-team advice, and aid in the professional growth of colleagues.

• Organized and self-motivated working style.

• Proficient in both German and English.

• Knowledge in, or eagerness to learn about, OT and production security.

🏝️ Benefits

• Attractive employee discounts on ESN & More products.

• Flexible working hours and options for remote work.

• Subsidies for mobility and fitness programs, including Wellpass and the Deutschlandticket.

• Company pension plan.

• Options for workations and more.