It Security Architect - Virtualization, Printing And Scanning

Siemens Energy; Lisboa; Hybrid; EUR 70,000 - 90,000; Full time

Job summary

Siemens Energy is seeking an IT Security Architect to lead security design for Virtual Desktop Infrastructure, printing and scanning services. You will work closely with End User Solutions, Digital Workplace and Cybersecurity teams to define secure architectures and governance across on‑premises and cloud environments.

The role requires 5–7 years in IT security, with hands-on experience in endpoint management, identity platforms and multiple cloud providers.

Qualifications

• Bachelor's degree in CS/IT/Cyber Security required; postgraduate in related field preferred.
• 5–7 years IT security experience, 3+ years in workplace security architecture.
• Experience securing virtualization, on-prem and cloud, plus endpoint management platforms.

Responsibilities

• Implement cybersecurity governance within End User services including VDI, printing, and scanning.
• Collaborate with Virtual Client, Print service teams, Endpoint Architects, and Cybersecurity teams.
• Define security constraints, guardrails, and reference architectures.
• Support architecture reviews and report to Heads of End User Solutions and Digital Workplace.

Skills

Security architecture

Endpoint management

Intune

Defender

Purview

EntraID

Cloud platforms

Azure

AWS

Google Cloud

OpenShift

Horizon

Workspot

SAML/OAuth

OIDC

SCIM

LDAP

Kerberos

NIST

ISO 27001

English

Education

Bachelor’s degree in CS/IT/Cyber Security

Postgraduate qualification in related field

Job description

IT Security Architect - Virtualization, Printing and Scanning

About the Role

Job ID 291203 Location Portugal Lisboa Amadora

• Country: PORTUGAL
• State/Province/County: Porto

• Country: ROMANIA
• State/Province/County: Bucuresti
• City: Bucharest

Remote vs. Office Hybrid (Remote/Office) Company Siemens Energy Unipessoal Lda. Organization EVP Global Functions Business Unit Digital Core Full / Part time Full-time Experience Level Manager / Team Leader

A Snapshot of Your Day

The IT Security Architect (technical and operational) will implement the Cybersecurity Governance rules and requirements within the Infrastructure End-User services, encompassing Virtual Desktop Infrastructure, Printing and Scanning. You will collaborate heavily with the Virtual Client and Print service teams, with the Endpoint Architects and Cybersecurity teams, and be a key contributor to service and technology design choices.

How You’ll Make an Impact

• Analyze and define interaction of the organization's processes, tools, data and technologies to develop secure architecture for the above services taking into account risk and best industry practices.
• Support the evaluation of business demands and prepare architecture decisions with deep consideration for security.
• Apply methods from the SE architecture framework and Security guidelines to support the evolution of the SE target architecture in virtualization, printing and scanning.
• Define and provide SE technology constraints, guardrails and reference security architectures.Facilitate IT solution architecture reviewsin close collaborator with Cybersecurity Teams and Governance topic leads.
• Reporting regularly to the head of End User Solutions and the head of Digital Workplace, supporting to shape new security practices and influence within the department.

What You Bring

• Bachelors degree in computer science, Information Technology or Cyber Security. Postgraduate qualification in a related field.
• Minimum 5 - 7 years of experience in IT security, with at least 3 years of direct experience in Workplace solutions' security architecture.Proven experience with Endpoint Management platforms like Microsoft Intune, Microsoft Defender, Microsoft Purview, and Good knowledge of Identity platforms like EntraID
• Strong understanding of Security principles surrounding device hardening, CIS benchmarks, Risk assessment and mitigation.Previous experience implementing security best practices (ISO 27001, NIST, etc.).Demonstrated experience in maintaining security compliance and requirements during migrations, carve outs, mergers and acquisitions.
• Proven experience working on securing virtualization platforms, on-premise and on cloud, utilizing management platforms like Omnissa Horizon, Workspot, Azure Virtual Devices, Windows 365 , Openshift.
• Knowledge of Secure Printing and Scanning technologies.Technical Proficiency in the Protocols: SAML, OAuth , OpenID Connect, SCIM, LDAP, Kerberos. Good understanding of Cloud Platforms: AWS, Azure, Google Cloud deployment models.
• Knowledge of Identity and Access Management System architecture concepts and their influence on application security. Secure System Design and Secure Service Design knowledge of latest security recommendations and industry best practices.
• English advanced level - mandatory