Security Solutions Architect

Rapinno Tech Solutions GmbH; München; Vor Ort; EUR 110.000 - 160.000; Vollzeit

Zusammenfassung

Rapinno Tech Solutions GmbH is seeking a Senior/Principal Solution & Infrastructure Security Architect to lead secure infrastructure design and hands-on security engineering in Munich, Germany. The role requires deep expertise in PKI, container security, network segmentation, and OT-IT integration, with the ability to review or write Python/FastAPI integration code.

You will architect secure systems, implement cryptographic controls, manage CI/CD security, and drive risk assessments under CRA

Qualifikationen

• 10+ years of experience in solution and infrastructure security.
• Proficient in PKI/certificate management and cryptography.
• Hands-on architect and security engineer capable of coding in Python/FastAPI.
• Strong knowledge of network segmentation and OT-IT integration.
• Experience with CI/CD security and SBOM.
• Familiar with CRA risk assessments and incident response.

Aufgaben

• Design secure infrastructure architectures and review security controls.
• Review or write Python/FastAPI integration code.
• Implement Docker/Kubernetes security and container isolation.
• Manage TLS termination, MTLS, and PKI operations.
• Oversee logging, monitoring, and incident response.

Kenntnisse

Network security

Infrastructure security

PKI and cryptography

Application security

Messaging security

DevSecOps & SBOM

Security operations & CRA

Python/FastAPI development

Tools

Docker

Kubernetes

Linux

Docker Compose

Jobbeschreibung

Role: Solution & Infrastructure Security Architect

Work Mode: Work from Office

Relocation will also accepted

Description:

We are looking for a Senior/Principal Solution & Infrastructure Security Architect with 10+ years of experience who specializes in infrastructure security, PKI/certificate management, container security, network segmentation, and industrial IoT/OT-IT integration.

The candidate must be both an architect and a hands-on security engineer, capable of designing secure infrastructure and reviewing or writing Python/FastAPI integration code.

Must-have technical skills

• Network security: Network architecture, trust zones, segmentation, reverse proxy, TLS termination, OT-IT integration.
• Infrastructure security: Linux hardening, Docker, Docker Compose, Kubernetes, container isolation, secrets management, backup and disaster recovery.
• PKI and cryptography: X.509, PKI, TLS/mTLS, EST, Certificate Authority (CA) operations, HSM, PKCS#11 and SoftHSM.
• Application and API security: Authentication, authorization, service-to-service identity, OWASP vulnerabilities, tenant isolation and audit trails.
• Messaging security: MQTT broker authentication, authorization and ACLs; database access controls.
• DevSecOps and supply-chain security: SBOM, dependency management, artifact signing, CI/CD security and authenticated offline updates.
• Security operations and compliance: Logging, monitoring, incident response, Cyber Resilience Act (CRA) risk assessments and technical documentation.
• Hands-on development: Python, FastAPI, integration testing and the ability to review embedded C interfaces.