Staff System Architect (m/f/d)

Siemens; Madrid; Hybrid; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Hybrid work model

Share matching program

Job summary

Siemens Spain is seeking a Staff System Architect to define end-to-end platform architecture for a multi-service environment. You will lead architecture decisions, translate enterprise goals into concrete designs, and guide cross-functional teams without direct reports.

You will design serverless and containerized components, define APIs and data contracts, and ensure security, identity, and cost-efficient cloud operations across AWS. Strong English communication is essential.

Qualifications

• Experience leading architectures across multiple systems.
• Proven ability to translate enterprise goals into concrete system designs.
• Familiarity with threat modeling and capacity planning.

Responsibilities

• Own the target architecture and roadmap from today to the future state.
• Translate enterprise architecture into system architecture with collaboration partners.
• Design component/data architecture with serverless, containers, and managed cloud services.
• Define APIs/interfaces with clear ownership and SLAs.
• Architect security/identity and data-boundary controls.
• Set non-functional targets for performance, availability, and cloud cost.
• Document decisions and lead cross-team technical reviews.

Skills

10+ years exp

ADR/Architecture practice

Distributed systems design

Data architecture

Security architecture

AWS + Terraform/CDK

Hands-on engineering: Go/Java/Kotlin/P

Tools

Terraform

CDK

Job description

We are extending the architectural foundation for our complex multi-service environment that connects multiple systems, data sources, and workflows at scale achieving real-time intelligence for product transparency and vulnerability operations. As Staff System Architect, you define this platform end to end and remain hands‑on where a prototype or code review resolves uncertainty. In this role, you lead through architecture, decisions, and influence teams without direct reports, line management, or personnel responsibility.

Challenges You Will Solve at Scale

• Architect enterprise-scale greenfield systems and evolve existing architectures to meet stringent service-level agreements for availability, performance, and reliability.
• Connect many enterprise systems including systems you do not own and cannot change into one coherent, trustworthy platform.
• Keep product-security attributes accurate and current across a large, continuously changing estate of products and components.
• Enforce consistent identity, access, and data-boundary controls across systems, so that trust and auditability hold at scale.
• Evolve live systems toward the target architecture without stopping them, while balancing performance, resilience, and cloud cost.
• Align architects, engineers, and system owners on decisions without formal authority over them.

Key Responsibilities

• Own the target architecture and the roadmap from today’s landscape to it, including migrations and cutovers for systems that cannot be switched off.
• Translate enterprise architecture into system architecture: partner with the Principal Key Expert Enterprise Architect to turn enterprise-level capabilities, principles, and target states into concrete, implementable system designs, and feed system-level constraints and trade-offs back into the enterprise architecture.
• Design component and data architecture: decompose the platform into well-bounded serverless functions, containerized services, and managed cloud services; select and model databases and storage.
• Define APIs and integration interfaces: design synchronous request/response, push-based events and webhooks, pull-based polling and batch synchronization, and streaming, with clear ownership, contracts, and SLAs.
• Define boundaries and contracts: decide which system owns which data and decision, and make the interfaces between systems explicit and versioned.
• Architect security and identity: role and permission flows across systems, data-boundary controls, threat modeling, and audit evidence by design.
• Set and meet non-functional targets for performance, availability, scale, and cloud cost; choose data stores and justify each choice.
• Make and record decisions: drive build-versus-buy calls, maintain architecture decision records, and keep documentation trustworthy.
• Lead technically across teams: review designs and technical decisions of architects and engineers, prototype risky parts yourself, and explain the architecture to engineering, security, and management.

Required Skills

• Experience: 10+ years in software engineering and architecture, including owning architectures across multiple systems and taking systems from design to production.
• Architecture practice: ADRs, C4 or similar models, threat modeling, capacity planning, and proof-of-concept-led build-versus-buy analysis.
• Distributed systems and integration: event-driven design, workflow orchestration, resilience patterns (idempotency, retries, sagas, outbox, CDC), and versioned REST/OpenAPI contracts.
• Data architecture: selecting relational, document, graph, search, and analytical stores; large-scale data modeling, retention, and classification.
• Security architecture: RBAC/ABAC, identity federation and SSO, least-privilege IAM, secrets management, and auditability.
• AWS and operations: cost-aware multi-service AWS designs with Terraform or CDK; SLOs, observability, incident response, and non-disruptive migrations.
• Hands-on engineering: production experience in at least one of Go, Java, Kotlin, C#, Rust, Python, or TypeScript.
• Technical leadership without authority: guide architects and engineers, resolve cross-team design disputes, and build agreement through clear reasoning and excellent written and spoken English.

Nice to have

• Product security: SBOM, CBOM, VEX, vulnerability management, and standards such as CycloneDX, SPDX, PURL, and CPE.
• Supply chain security: provenance, signing, attestations, SLSA, in-toto, and AI/model supply chains.
• Cryptographic agility: cryptographic inventories, certificate lifecycles, and post-quantum readiness.
• Enterprise platforms: Entra ID, SCIM, service management, and platform engineering (paved roads, CI/CD guardrails).
• Regulated environments: EU Cyber Resilience Act, NIS2, ISO 27001, or IEC 62443.

What do we offer?

• Hybrid work model that supports flexibility and a sustainable work-life balance.
• An environment where everyone can bring their whole self to work and feel a sense of belonging.
• A workplace that values curiosity and guarantees continuous learning, with development opportunities for both personal and professional growth.
• Share matching programs to become a shareholder of Siemens AG.
• A wide range of flexible benefits for you and your family to enjoy

Did you know Siemens Spain has been recognized as one of LinkedIn's Top Companies to work for in 2026? It's more than just an award - it reflects a company where people grow, feel valued, and celebrate success together. Explore what your future at Siemens could look like!

At Siemens, we value the diversity of our teams, promote equal opportunities, and foster an inclusive work environment. We welcome talent without distinction, respecting and supporting all forms of diversity. Our Equality Plan, in accordance with current legislation, ensures fair and transparent treatment, and reinforces our commitment to building an increasingly equitable and diverse workplace.