Senior Security Architect / Lead engineer

Allianz Technology; Barcelona; Híbrido; EUR 70.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Company bonus scheme

Pension

Employee shares program

Multiple employee discounts

Healthcare benefits

Parental leave benefits

Descripción de la vacante

Allianz Technology in Barcelona is seeking a Senior Security Architect / Lead Engineer to safeguard and enhance the security of our cloud database platforms, including Oracle and PostgreSQL. The role encompasses defining security strategies, leading a dedicated security team, and working closely with various architectural and operational teams. Candidates should have extensive experience with cloud database security and compliance frameworks like ISO 27001 and GDPR. The position offers a hybrid work model and a comprehensive benefits package.

Formación

• Strong hands-on experience securing Oracle and PostgreSQL databases in cloud environments.
• Solid expertise in OCI security and networking.
• Proven background in network security and certificate lifecycle management.
• Deep practical knowledge of Microsoft Entra ID for database access.
• Experience with ISO 27001, SOC 2, GDPR compliance frameworks.
• Previous experience leading teams in agile or DevOps environments.
• Excellent communication skills for diverse audiences.

Responsabilidades

• Design and implement secure architectures for Oracle and PostgreSQL databases.
• Define Zero Trust network security controls for cloud environments.
• Lead threat-modelling activities and implement engineering controls.
• Own identity and access integration responsibilities.
• Establish vulnerability management and DevSecOps practices.
• Act as primary contact for security audits and remediation.
• Lead and mentor a cross-functional security squad.

Conocimientos

Oracle Database security

PostgreSQL security

OCI security

Network security

Microsoft Entra ID

Communication skills

Descripción del empleo

About the Job

At Allianz Technology, safeguarding our data platforms is mission‑critical. We are looking for a hands‑on Senior Security Architect / Lead Engineer to own and continuously elevate the security and compliance posture of our cloud database platforms, including Oracle Databases on OCI and PostgreSQL environments.

In this role, you will define and drive the security strategy for business‑critical data infrastructure, working at enterprise scale in a highly regulated, international environment. You will combine deep technical expertise with people leadership, leading a dedicated security squad while collaborating closely with platform architects, operations, and governance teams across the organization.

If you are passionate about building secure‑by‑design platforms, translating regulatory requirements into robust engineering controls, and mentoring engineers while staying hands‑on, this role offers both technical depth and strategic impact.

What You Do

• Design and implement secure end‑to‑end architectures for Oracle Databases (OCI) and PostgreSQL, including encryption, key management, and hardening.
• Define and enforce Zero Trust network security controls for cloud database environments (private endpoints, segmentation, certificates).
• Lead threat‑modelling activities and translate risks into concrete engineering controls.
• Own identity and access integration with Microsoft Entra ID, including OAuth/OIDC, Conditional Access, and Privileged Identity Management.
• Establish vulnerability management and apply DevSecOps practices across the database platform.
• Act as primary contact for security audits, converting findings into remediation actions and improvements.
• Lead and mentor a cross‑functional security squad, managing priorities, incidents, and stakeholder communication.

What You Bring

• Strong hands‑on experience securing Oracle Database (including Advanced Security) and PostgreSQL in cloud environments.
• Solid expertise in OCI security, networking, and cloud database infrastructure.
• Proven background in network security, certificate lifecycle management, and secrets management.
• Deep practical knowledge of Microsoft Entra ID and identity‑based access for databases.
• Experience working with security and compliance frameworks such as ISO 27001, SOC 2, GDPR, CIS Benchmarks, or DORA.
• Previous experience leading or tech‑leading teams in agile or DevOps environments.
• Excellent communication skills, able to explain complex security topics to technical and non‑technical audiences.

What We Offer

• We offer a hybrid work model which recognizes the value of striking a balance between in‑person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

Commitment to Integrity, Fairness & Inclusion

Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, or sexual orientation, or any other characteristics protected under applicable local laws and regulations.