Security Architect

Coltech; Deutschland; Vor Ort; EUR 110.000 - 170.000; Vollzeit

Zusammenfassung

Coltech is seeking a Security Architect to lead multi-cloud security across AWS and Azure in a regulated financial services environment. You will shape secure-by-design architectures, landing zones, IAM strategies and posture management across both clouds.

You will influence engineering, risk and compliance, drive IaC governance, and establish container security baselines (EKS/AKS) and Zero Trust networking patterns to protect critical data and workloads.

Qualifikationen

• 7+ years in cloud security with architecture experience.
• Deep expertise in AWS security services (IAM, Security Hub, GuardDuty, KMS).
• Deep expertise in Azure security (Entra ID, Defender for Cloud, Key Vault).
• Strong Terraform and either Bicep or CloudFormation.
• Extensive knowledge of EKS/AKS security.

Aufgaben

• Multi-Cloud Architecture — design secure landing zones and reference architectures for AWS and Azure.
• Identity Architecture — govern IAM and Entra ID, with federation and PIM/PAM concepts.
• Cloud Posture Management — integrate Security Hub, GuardDuty, Defender for Cloud and SIEM.
• IaC Governance — enforce policy-as-code and compliance automation.
• Container Security — set EKS/AKS baselines and runtime protection.
• Zero Trust networking and private endpoints, WAF and firewall patterns.

Kenntnisse

Multi-Cloud Architecture

Identity Governance

Cloud Security Strategy

IaC Governance

Container Security

Zero Trust Networking

Tools

Terraform

Bicep

CloudFormation

AWS IAM

Entra ID

GuardDuty

Security Hub

Defender for Cloud

KMS

WAF/Shield

Jobbeschreibung

Our client is scaling secure cloud adoption across AWS and Azure within a regulated financial‑services environment. As a Security Architect, you will define secure‑by‑design architecture, landing‑zone guardrails, IAM strategy, network‑security patterns and posture‑management frameworks across both cloud platforms.

This role suits senior architects who want multi‑cloud ownership, influence across engineering, risk and compliance, and the ability to shape enterprise cloud‑security strategy.

Key Responsibilities

• Multi‑Cloud Architecture — design secure landing zones, guardrails and reference architectures across AWS & Azure.
• Identity Architecture — define IAM (AWS) and Entra ID (Azure) governance, federation, PIM/PAM and workload identity models.
• Cloud Posture Management — architect Security Hub, GuardDuty, Defender for Cloud and SIEM integrations.
• IaC Governance — lead Terraform/Bicep/CloudFormation standards, policy‑as‑code and compliance automation.
• Container Security — define EKS/AKS security baselines, runtime protection and workload isolation.
• Architect Zero Trust networking, segmentation, PrivateLink/Private Endpoints, WAF/Shield/Firewall patterns.
• Ensure alignment with GDPR/DSGVO, BSI C5, NIS2, KRITIS.

Experience Needed

• 7+ years in cloud security, with 2+ years in architecture.
• Deep expertise in AWS security (IAM, Security Hub, GuardDuty, KMS, WAF, Shield).
• Deep expertise in Azure security (Entra ID, Defender for Cloud, Key Vault, Private Endpoints).
• Strong Terraform + either Bicep or CloudFormation.
• Strong EKS/AKS security knowledge.

Nice to Have

• BAIT, MaRisk, EBA guidelines.
• Certifications: AWS Security Specialty, AZ‑500, SC‑100, CISSP, CCSP.