IT/OT Security Architect

This is a fully remote position, open to applicants in Germany.

📋 Description

• Develop and enhance security architectures across IT, OT, cloud, and AI systems.

• Create secure cloud and hybrid architectures using Azure, AWS, and GCP, including landing zones, identity and network design, encryption, and security baselines.

• Establish target architectures, security roadmaps, and migration strategies for cloud transformations and multi-cloud environments.

• Perform threat modeling, architecture evaluations, and risk assessments.

• Design network and perimeter security, including segmentation, firewall configurations, and Zero Trust Network Access.

• Construct IAM and PAM architectures alongside cryptography and PKI principles.

• Evaluate and secure cloud platform services, container/Kubernetes environments, and CI/CD pipelines (DevSecOps).

• Specify security requirements for projects, products, cloud providers, and service providers.

• Convert regulatory requirements into technical specifications and auditable controls.

• Offer expert guidance to CISOs, cloud teams, architecture boards, and technical decision-makers.

• Draft security concepts, policies, and technical documentation.

• Utilize AI-assisted tools for discovery, architecture evaluations, and documentation, along with expert validation and approval.

⛳️ Requirements

• Proficiently use AI tools in daily consulting tasks, including critically assessing their outcomes.

• Strong understanding of confidentiality when utilizing AI; awareness of permissible data usage and risks such as data leakage, model training, and prompt injection.

• Eagerness to continually enhance processes and products through AI.

• A minimum of 3–5 years of experience in IT/cybersecurity, with several years in architecture or consulting roles.

• Comprehensive knowledge of networking, endpoints, identity, applications, and cloud technologies.

• Experience with Zero Trust and segmentation principles, as well as IAM/PAM (Entra ID, Active Directory).

• Familiarity with ISO 27001, BSI IT-Grundschutz, NIST CSF, MITRE ATT&CK, and SABSA/TOGAF.

• Understanding of cryptography, PKI, and secure application design.

• Business-fluent in both German and English.

• Highly desirable: expertise in cloud architecture, prompt engineering, AI agents or LLM integration, AI governance, and experience in regulated settings.

• Certifications (preferred): CCSP, CCSK, Microsoft SC-100, Azure AZ-305, AWS Solutions Architect Professional, AWS Security Specialty, Google Professional Cloud Architect, Google Professional Cloud Security Engineer, CISSP, CISSP-ISSAP, SABSA SCF, TOGAF, CISM, OSCP.

🏝️ Benefits

• Competitive base salary starting at €80,000 plus profit sharing of up to €70,000.

• Flexible working hours.

• Option for remote work.

• 30 days of annual leave.

• Provision of IT equipment, such as an Apple MacBook.

• Regular team-building events.

• Company pension plan and health insurance.

• Employee discounts and shopping benefits.