Infrastructure Security Architect

Role: Infrastructure Security Architect

Experience: 10+ years

Location: Germany, Munich

Work Mode: Work from Office,5 days a week is mandatory

Only Immediate Joiners preferred or who can join in 15 days.

Work permit is required and no sponsorship for this job.

Job Description

Role:

Solution & Infrastructure Security Architect

• Level: Senior / Principal, 10+ years
• Focus: perimeter, infrastructure, IIDC Hub services, connections to message broker, IIDC Self Service Portal, manufacturer PKI and customer networks
• Must have:
• Network and trust-zone design, segmentation, reverse proxy / TLS termination, OT-IT integration
• Linux and OCI container hardening, container isolation, image provenance, secrets management, backup and disaster recovery
• Container runtime environments (Docker, Docker Compose, Kubernetes)
• API authentication/authorization, service-to-service identity, OWASP-class vulnerabilities, tenant isolation, audit
• X.509/PKI, TLS/mTLS, EST, CA operation, key custody via PKCS#11 / SoftHSM / HSM
• MQTT broker authentication/authorization and ACLs, database access control
• Supply chain: dependency management, SBOM, artifact signing, CI/CD and secret security, authenticated offline updates
• Logging, monitoring, incident response, coordinated disclosure
• CRA risk assessment and technical documentation
• Writes and reviews Python/FastAPI backend and integration code, including tests
• Reads embedded C sufficiently to validate interfaces
• Nice to have: IEC 62443, OT deployments, enterprise PKI/provisioning services, BRSKI/MASA, secure boot and firmware signing, penetration-test coordination
• Out of scope: deep firmware and secure-element implementation
• Should have worked on Semi Conductor domain in a plus.
• May be DTH/ but NOT EMBEDDED
• Should have work experience in Networking, LINUX Oriented, Container runtime environments (Docker, Docker Compose, Kubernetes)

Interested candidates please share your latest CV to ' [email protected] '