Solution & Infrastructure Security Architect

Mirafra Technologies; München; Presencial; EUR 90.000 - 120.000; Jornada completa

Descripción de la vacante

Mirafra Technologies in Munich, Germany, is seeking a DevSecOps/IT security engineer focused on perimeter, infrastructure, and IIDC hub services. Strong Linux security, container hardening, and API security skills are essential.

You will work on MQTT broker access controls, SBOM and CI/CD security, and validating embedded C interfaces, while contributing Python/FastAPI backend development and tests. German work permit preferred.

Formación

• Network and trust-zone design, segmentation, reverse proxy / TLS termination, OT-IT integration
• Linux and OCI container hardening, container isolation, image provenance, secrets management, backup and disaster recovery
• Container runtime environments (Docker, Docker Compose, Kubernetes)
• API authentication/authorization, service-to-service identity, OWASP-class vulnerabilities, tenant isolation, audit
• MQTT broker authentication/authorization and ACLs, database access control
• Supply chain: dependency management, SBOM, artifact signing, CI/CD and secret security, authenticated offline updates
• Logging, monitoring, incident response, coordinated disclosure
• CRA risk assessment and technical documentation
• Writes and reviews Python/FastAPI backend and integration code, including tests
• Reads embedded C sufficiently to validate interfaces

Responsabilidades

• Write and review Python/FastAPI backend and integration code with tests
• Implement container hardening and image provenance controls
• Manage MQTT broker authentication, ACLs and access controls
• Validate interfaces by reading embedded C code

Conocimientos

Network security design

Container hardening

Python/FastAPI backend

C interface reading

API authentication/authorization

OWASP vulnerabilities

Herramientas

Docker

Docker Compose

Kubernetes

Descripción del empleo

Candidates based in Germany, or with a German work permit, are preferred.

Focus:

perimeter, infrastructure, IIDC Hub services, connections to message broker, IIDC Self Service Portal, manufacturer PKI and customer networks

Must have:

• Network and trust-zone design, segmentation, reverse proxy / TLS termination, OT-IT integration
• Linux and OCI container hardening, container isolation, image provenance, secrets management, backup and disaster recovery
• Container runtime environments (Docker, Docker Compose, Kubernetes)
• API authentication/authorization, service-to-service identity, OWASP-class vulnerabilities, tenant isolation, audit
• MQTT broker authentication/authorization and ACLs, database access control
• Supply chain: dependency management, SBOM, artifact signing, CI/CD and secret security, authenticated offline updates
• Logging, monitoring, incident response, coordinated disclosure
• CRA risk assessment and technical documentation
• Writes and reviews Python/FastAPI backend and integration code, including tests
• Reads embedded C sufficiently to validate interfaces

Nice to have:

IEC 62443, OT deployments, enterprise PKI/provisioning services, BRSKI/MASA, secure boot and firmware signing, penetration-test coordination