Network Security Architect Digital Platforms

Giesecke & Devrient GmbH; el Prat de Llobregat; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Culture and Diversity

Global Collaboration

Open working space

Innovative Products

Career Development

Social Benefits

Flexible work time

Job summary

Giesecke & Devrient GmbH in Spain invites a Network Architect – Digital Platforms to lead modern connectivity and security architecture. You will shape Zero Trust and SASE-based models across hybrid cloud environments, collaborating with Security, Cloud, IT Ops, and Compliance teams.

You will design enterprise-grade SD‑WAN, CASB, SWG, ZTNA, FWaaS, and DNS security while guiding architectural standards and policy enforcement. Fluency in English is essential.

Qualifications

• 5+ years of professional experience in network or security architecture.
• Advanced experience designing and operating enterprise SASE architectures (SD‑WAN, CASB, SWG, ZTNA, FWaaS, DNS Security).
• Strong Zero Trust expertise and hybrid/multi-cloud understanding (Azure, AWS, GCP).
• Experience evaluating and integrating security and networking technologies and standards.

Responsibilities

• Define and drive network and connectivity architecture for modern digital platforms.
• Design and maintain an enterprise-grade SASE architecture across multi-cloud environments.
• Lead the implementation of Zero Trust controls across identity, endpoints, and cloud workloads.
• Collaborate with Corporate Security, IT Operations, Cloud, Datacenter, and Compliance teams.
• Architectural standards, security best practices, and reference architectures.

Skills

Zero Trust

SASE architectures

ZTNA

Cloud networking

Identity-based access

Security standards

Architectural communication

Leadership

English communication

Education

Bachelor's degree in Computer Science or Information Systems

Tools

Azure

AWS

GCP

Zscaler

Palo Alto Prisma Access

Job description

Select how often (in days) to receive an alert:

Network Security Architect Digital Platforms

At G+D, we are looking for aNetwork Architect – Digital Platformsto lead the evolution of our connectivity and network security architecture towards amodern Zero Trust and SASE-based model.

This role plays a key part in transforming traditional IT architectures into secure, scalable, and compliant digital platforms, working closely withCorporate Security, Cloud, IT Operations, and Compliance teams. You will collaborate with colleagues acrossSpain, Germany, and Indiain an international environment.

Your Responsibilities

As Network Architect – Digital Platforms, you will be responsible for defining and driving the network and connectivity architecture for modern digital platforms, ensuring alignment with corporate security standards and regulatory frameworks.

• Design, implement, and maintain anenterprise-grade SASE architecture, covering SD‑WAN, CASB, SWG, ZTNA, FWaaS, and DNS Security
• Architect and evolveZero Trust Network Access (ZTNA)solutions based on identity-centric, least-privilege access principles
• Designsecure, scalable architecturesfor hybrid and multi-cloud environments (Azure, AWS, GCP)
• Lead the assessment, selection, and integration ofnetwork and security technologiesaligned with business needs and security maturity
• Drive the deployment and integration of SASE platforms such asZscaler or Palo Alto Prisma Access
• ImplementZero Trust controlsacross identity, endpoints, network infrastructure, and cloud workloads
• Define and enforce policies for:
  • Identity-based access control
  • Network segmentation and micro-segmentation
  • Secure remote access
  • Cloud traffic inspection
  • Data protection
• Establisharchitectural standards, security best practices, and reference architectures
• Collaborate closely withCorporate Security, IT Operations, Cloud, Datacenter, and Compliance teamsto align network architecture and security strategies
• Act as a key architectural advisor, explaining design decisions, trade-offs, and security implications to diverse stakeholders
• Drive architectural evolution and transformation from traditional networks towardsZero Trust and cloud-native connectivity models

Your Profile

• Bachelor’s degree inComputer Science, Information Systems, or a related field
• 5+ years of relevant professional experiencein network or security architecture roles
• Advanced experience designing and operatingenterprise SASE architectures, including:
  • SD‑WAN
  • Secure Web Gateway (SWG)
  • CASB
  • ZTNA
  • FWaaS
  • DNS Security
• StrongZero Trust expertise, including identity-driven access, continuous verification, least privilege, and micro-segmentation
• Deep understanding ofhybrid and multi-cloud architectures, including:
  • Azure, AWS, and cloud networking
  • Secure connectivity for IaaS, PaaS, and SaaS
• Proven experience evaluating and integratingsecurity and networking technologies, including SASE platforms such as Zscaler or Palo Alto Prisma Access
• Hands‑on experience defining and enforcingsecurity standards and policies, aligned with frameworks such asNIST or PCI DSS
• Strong architectural communication skills, able to clearly explain complex designs and trade-offs
• Strong collaboration and cross‑functional leadership skills, partnering effectively with Security, Cloud, Datacenter, and Application teams
• Analytical and structured problem‑solving mindset
• Experience driving change and transformation initiatives in complex IT environments
• Strong sense of ownership and accountability for secure, reliable, and scalable infrastructure solutions
• Excellentcommunication skills in English(Spanish is a plus)

What We Offer

• Culture and Diversity:Join a people oriented environment with different nationalities and a great team spirit, flat hierarchies (everyone speaks to everyone). Equal Opportunity Employer and LGBT+ friendly.
• Global Collaboration:Enjoy collaborative work in Agile/SCRUM teams and with stakeholders around the globe.
• Open working spacewith Best‑in‑class equipment: High-performance PC with huge monitors.
• Innovative Products:Design and develop business processes and IT solutions for innovative products and digital solutions.
• Career Development:Continuous training and coaching, talent program.
• Social Benefits:flexible compensation (transport tickets, childcare vouchers, training, private insurance) and in‑house parking.
• Flexible work time and remote work:M-Th 8.30 – 17.30 and Fri 8.30 – 15.30, hybrid model.
• Own Canteen:Take a break with our breakfast and lunch service: Choose between a big range of menus, salad desk and sandwich service. Fruit packages.
• Location:El Prat de Llobregat. Easy communication by public transport (Bus 88 and 110, Metro L10 Riu Vell from Barcelona, PR4 from El Prat) o private transport.

Learn more about G+D

Explore what makes G+D unique – check out this video:

The personal data you provide will be processed to manage your application in accordance with the GDPR and our Privacy Policy, available at Data Privacy | G+D .

$$ We are an equal opportunity employer! We promote diversity in all its forms and create an inclusive work environment, free from prejudice, discrimination and harassment, in which all employees feel a sense of belonging. We warmly welcome all applications regardless of gender, age, race or ethnic origin, social and cultural background, religion, disability and sexual orientation.