Security Architect

Response Informatics; München; Vor Ort; EUR 110.000 - 165.000; Vollzeit

Zusammenfassung

Response Informatics Limited. seeks a Senior / Principal Infrastructure Security Architect to design and secure the infrastructure connecting various systems, applications and data flows.

The role combines hands-on Python backend work with security leadership across network, container and API layers. The ideal candidate brings 10+ years in security architecture, deep PKI and TLS expertise, and experience with OT/IT convergence, CI/CD security, SBOMs and cryptographic provisioning.

Qualifikationen

• 10+ years in security architecture or senior security roles.
• Experience designing secure infrastructure across networks, cloud and on-prem.
• Strong background in TLS, PKI and certificate management.
• Hands-on Python backend development and API security experience.

Aufgaben

• Design and secure network architecture across IT/OT and cloud.
• Harden Linux/UNIX and container environments (Docker, Kubernetes).
• Secure REST APIs and inter-system communications (OAuth, IAM).
• Manage PKI, certificates, CA infrastructure and HSM integration.
• Secure MQTT brokers and data flows; implement ACLs and access control.
• Implement CI/CD security, SBOMs and software signing.
• Monitor security posture, logging, incident response and CRA documentation.
• Develop backend integrations using Python/FastAPI and validate code.

Kenntnisse

Network security

Container security

API security

PKI & certificates

MQTT security

DevSecOps

Monitoring & compliance

Python development

Tools

Docker

Kubernetes

FastAPI

TLS/mTLS

HSM/SoftHSM

Jobbeschreibung

Job Title: Senior / Principal Infrastructure Security Architect

Experience: 10+ years

Role Overview:

We are looking for an experienced Security Architect who can design and secure the infrastructure connecting different systems, applications, customer networks and message brokers.

The candidate should have strong experience in network security, Linux, Docker/Kubernetes, API security, PKI/certificates and Python backend development.

Key Responsibilities & Skills

1. Network Security

• Experience with network security, segmentation and firewall rules.
• Knowledge of secure communication between IT and OT systems.
• Experience with reverse proxies and TLS security.

2. Infrastructure & Container Security

• Strong Linux/Unix administration and security hardening.
• Experience securing Docker, Docker Compose and Kubernetes environments.
• Knowledge of container isolation, secrets management, backup and disaster recovery.

3. API & Application Security

• Experience securing REST APIs and application communication.
• Knowledge of authentication, authorization and access control.
• Understanding of OWASP security vulnerabilities and data protection.

4. PKI & Certificate Management

• Experience with digital certificates, X.509, SSL/TLS and mTLS.
• Knowledge of Certificate Authorities (CA) and certificate management.
• Experience with HSM, PKCS#11 or SoftHSM is preferred.

5. MQTT & Database Security

• Experience securing MQTT message brokers.
• Knowledge of broker authentication, authorization and access control (ACLs).
• Understanding of database security.

6. DevSecOps & Supply Chain Security

• Experience with CI/CD pipeline security.
• Knowledge of SBOM, dependency management and software signing.
• Experience managing secrets and secure software updates.

7. Monitoring & Compliance

• Experience with security monitoring, logging and incident response.
• Knowledge of Cyber Resilience Act (CRA) and security documentation.

8. Python Development

• Hands-on experience with Python and FastAPI.
• Ability to develop, review and test backend APIs and integrations.
• Basic understanding of embedded C code.

Good to Have

• IEC 62443 and industrial/OT security experience.
• Enterprise PKI and certificate provisioning.