IIoT Senior Solution Architect

Sulzer Chemtech, S. de R.L. de C.V.; Madrid; On-site; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Meal vouchers

Flexible compensation scheme

Health insurance

Job summary

Sulzer is seeking an IIoT Senior Solution Architect in Madrid to join our team and help develop Sulzer Edge, our secure data movement platform for shop-floor OT and IT systems.

You will work hands-on with Python, Docker, Azure CI/CD, and edge deployments, designing robust, scalable solutions, addressing cybersecurity requirements (IEC 62443, EU Cyber Resilience Act), and collaborating with software, OT, IT, networking, and security colleagues.

Qualifications

• 5–7 years of relevant professional experience.
• Strong Python and shell scripting fundamentals.
• Solid Linux commands and network troubleshooting.
• Experience with Docker, containers and Kubernetes.
• Experience with SQL databases and software testing practices.
• Knowledge of TLS, certificates, and service authentication.
• Experience in edge deployments and updating edge software.
• Ability to interpret IEC 62443 and EU Cyber Resilience Act.
• Strong communication and independent problem-solving.
• Willingness to learn new technologies.

Responsibilities

• Develop and enhance Sulzer Edge with Python services and DB layer.
• Build and test software locally with Docker; deploy to Azure via CI/CD.
• Integrate Edge with sites and systems using various protocols.
• Diagnose network issues and communicate findings to teams.
• Apply cybersecurity standards to design and operation.
• Implement secure handling of certificates and secrets.
• Support OT security activities across sites.
• Maintain deployed Edge instances and edge devices.
• Document configurations and decisions for reliable operation.
• Collaborate across software, OT, IT, networking, and cybersecurity.

Skills

Python

Shell scripting

Linux

Docker

Kubernetes

SQL databases

Software testing

TLS/certs

Edge deployments

Cybersecurity standards

Education

Degree in CS/Engineering

Tools

Azure DevOps

Azure

Vaults/Secret stores

Job description

Sulzer is a leading engineering company with a proud heritage of innovation. Join our global team to grow your expertise and develop innovative solutions that enable a prosperous and more sustainable society.

About the role

Join Sulzer as an IIoT Senior Solution Architect and help develop and scale Sulzer Edge, our in-house solution for securely moving data between shop-floor machines and operational technology (OT) environments and our business IT systems.

This is a hands-on software engineering opportunity where you will work closely with the team behind Sulzer Edge, contributing directly to its development, deployment and evolution. You will build and test software, connect the solution to new industrial sites and solve the real-world networking, security and integration challenges that come with edge deployments.

You will also play an important role in ensuring that the solution continues to meet relevant cybersecurity standards and regulatory requirements as it grows across our organization.

What you will do :

• Develop and enhance Sulzer Edge, contributing new capabilities across Python services, shell scripts and the database layer.
• Build and test software locally using Docker and deploy solutions to Azure through CI/CD pipelines.
• Integrate the Edge solution with new sites and systems, including file servers, databases and machine interfaces with different protocols, ports and access requirements.
• Diagnose network and connectivity issues methodically and communicate technical findings clearly to network, infrastructure and security teams.
• Apply cybersecurity requirements, including IEC 62443 and the EU Cyber Resilience Act, to the technical design and operation of the solution.
• Implement secure approaches for certificates, secrets, authentication and least-privilege container environments.
• Support OT security activities for the industrial sites within the solution's scope.
• Maintain and update deployed Edge instances, including software running on edge devices in the field.
• Support testing, deployment, troubleshooting and ongoing maintenance of the solution.
• Document solutions, configurations and technical decisions to support reliable operation and future development.
• Collaborate with colleagues across software engineering, OT, IT infrastructure, networking and cybersecurity.

What you need to succeed:

Required:

• Approximately 5 to 7 years of relevant professional experience, or equivalent expertise gained through practical experience.
• Strong software development fundamentals and experience building and running production services.
• Solid programming skills, ideally including Python, together with shell scripting.
• Strong Linux command-line skills, including practical network troubleshooting.
• Hands-on experience with Docker, containers and Kubernetes.
• Experience working with SQL databases.
• Well-established software testing practices throughout development and deployment.
• Understanding of TLS, certificates, secrets and service-to-service authentication.
• Experience operating edge deployments, including maintaining and updating software on edge devices in the field.
• Ability to interpret relevant cybersecurity regulations and standards, such as IEC 62443 and the EU Cyber Resilience Act, and translate requirements into practical technical solutions.
• Ability to work independently, troubleshoot complex technical issues and take ownership of solutions.
• Clear communication and collaboration skills, including the ability to explain technical findings to colleagues in other disciplines.
• A curious, problem-solving mindset and willingness to learn unfamiliar technologies and environments.

Preferred:

• Experience with Azure and Azure DevOps, including cloud deployment and CI/CD.
• Knowledge of industrial or OT protocols such as OPC UA, MQTT, Modbus or S7, or a strong willingness to learn them.
• Experience integrating applications with file servers and file-transfer services.
• Knowledge of Azure networking, infrastructure, security controls, identity and access management.
• Experience working with VPN-based or segmented network architectures.
• Experience with container hardening techniques, including least-privilege users, dropped capabilities, read-only filesystems and container security scanning.
• Experience managing application secrets through vaults or dedicated secret stores.
• Previous experience in a manufacturing, industrial or OT environment.
• A degree in computer science, engineering or a related field, or equivalent practical experience.

What we offer you

• A permanent, full-time contract.
• A competitive salary as well as participation in the variable remuneration system based on personal and financial objectives.
• Meal vouchers
• Access to a voluntary flexible compensation scheme, allowing employees to optimize their salary package through benefits such as health insurance, transport or childcare.
• The opportunity to work on the intersection of software engineering, Industrial IoT, cybersecurity and operational technol