IT Security Architect - Virtualization, Printing and Scanning

Siemens Energy; Porto; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Flexible working hours

Remote work opportunities

SD & professional development

Job summary

Siemens Energy is seeking an IT Security Architect to implement cybersecurity governance within End User services, including VDI, printing and scanning. You will collaborate with Virtual Client and Print service teams, Endpoint Architects and Cybersecurity teams to influence design choices.

The role requires 5–7 years in IT security, with hands-on experience in workplace security architecture, Intune, Defender and Purview.

Qualifications

• Bachelor's degree in computer science, information technology or cyber security.
• Postgraduate qualification in a related field.
• Minimum 5–7 years of IT security experience with 3+ years in workplace security architecture.
• Proven experience with endpoint management and identity platforms.
• Strong knowledge of security principles, ISO 27001/NIST compliance and migrations.

Responsibilities

• Define secure architecture for End User services (VDI, printing, scanning).
• Collaborate with Cybersecurity teams to shape security guidelines and governance.
• Support architecture reviews and provide security constraints and reference architectures.
• Evaluate business demands and propose architecture decisions with risk focus.
• Report to heads of End User Solutions and Digital Workplace.

Skills

IT security

Workplace security architecture

Endpoint management

Identity platforms

Security frameworks

Cloud security

Security governance

Education

Bachelor's in CS/IT/Cyber Security

Postgraduate qualification

Tools

Microsoft Intune

Microsoft Defender

Microsoft Purview

EntraID

Omnissa Horizon

Workspot

Azure Virtual Desktop

Windows 365

OpenShift

Job description

A Snapshot of Your Day

The IT Security Architect (technical and operational) will implement the Cybersecurity Governance rules and requirements within the Infrastructure End-User services, encompassing Virtual Desktop Infrastructure, Printing and Scanning. You will collaborate heavily with the Virtual Client and Print service teams, with the Endpoint Architects and Cybersecurity teams, and be a key contributor to service and technology design choices.

How You’ll Make An Impact

• Analyze and define interaction of the organization's processes, tools, data and technologies to develop secure architecture for the above services taking into account risk and best industry practices.
• Support the evaluation of business demands and prepare architecture decisions with deep consideration for security.
• Apply methods from the SE architecture framework and Security guidelines to support the evolution of the SE target architecture in virtualization, printing and scanning.
• Define and provide SE technology constraints, guardrails and reference security architectures. Facilitate IT solution architecture reviews in close collaborator with Cybersecurity Teams and Governance topic leads.
• Reporting regularly to the head of End User Solutions and the head of Digital Workplace, supporting to shape new security practices and influence within the department.

What You Bring

• Bachelors degree in computer science, Information Technology or Cyber Security. Postgraduate qualification in a related field.
• Minimum 5 - 7 years of experience in IT security, with at least 3 years of direct experience in Workplace solutions' security architecture. Proven experience with Endpoint Management platforms like Microsoft Intune, Microsoft Defender, Microsoft Purview, and Good knowledge of Identity platforms like EntraID
• Strong understanding of Security principles surrounding device hardening, CIS benchmarks, Risk assessment and mitigation. Previous experience implementing security best practices (ISO 27001, NIST, etc.). Demonstrated experience in maintaining security compliance and requirements during migrations, carve outs, mergers and acquisitions.
• Proven experience working on securing virtualization platforms, on-premise and on cloud, utilizing management platforms like Omnissa Horizon, Workspot, Azure Virtual Devices, Windows 365 , Openshift.
• Strong knowledge of technology platforms and architectural concepts surrounding Entra ID and Active Directory authentication , LAN, WAN, Inbound and Outbound network connectivity and associated security concepts. TLS, AES, HTTPS, IPSEC and other encryption technologies specific to virtualization, printing and scanning.
• Knowledge of Secure Printing and Scanning technologies. Technical Proficiency in the Protocols: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos. Good understanding of Cloud Platforms: AWS, Azure, Google Cloud deployment models.
• Knowledge of Identity and Access Management System architecture concepts and their influence on application security. Secure System Design and Secure Service Design knowledge of latest security recommendations and industry best practices.
• English advanced level - mandatory

About The Team

Our Corporate Global Functions are essential in driving the company's strategic initiatives and ensuring operational excellence across various departments, business areas, and regions. These roles support our vision to become the most valued energy technology company in the world. As part of our team, you contribute to our vision by shaping the global energy transition, partnering with our internal and external stakeholders, and conducting business responsibly and in compliance with legal requirements and regulations.

Who is Siemens Energy?

At Siemens Energy, we are more than just an energy technology company. With ~100,000 dedicated employees in more than 90 countries, we develop the energy systems of the future, ensuring that the growing energy demand of the global community is met reliably and sustainably. The technologies created in our research departments and factories drive the energy transition and provide the base for one sixth of the world's electricity generation. Our global team is committed to making sustainable, reliable, and affordable energy a reality by pushing the boundaries of what is possible. We uphold a 150-year legacy of innovation that encourages our search for people who will support our focus on decarbonization, new technologies, and energy transformation.

Find out how you can make a difference at Siemens Energy: https://www.siemens-energy.com/employeevideo

Our Commitment to Diversity

Lucky for us, we are not all the same. Through diversity, we generate power. We run on inclusion and our combined creative energy is fueled by over 130 nationalities. Siemens Energy celebrates character – no matter what ethnic background, gender, age, religion, identity, or disability. We energize society, all of society, and we do not discriminate based on our differences

Rewards And Benefits

• In addition to an attractive remuneration package in line with the market, you can expect an attractive employer-financed company pension scheme
• We also offer the opportunity to become a Siemens Energy shareholder
• We offer our employees the opportunity to work flexibly and remotely, and our inspiring offices provide space for collaboration and creativity
• The professional and personal development of our employees is very important to us. We provide them with the opportunities to learn and develop in a self-determined way, various attractive programmes and learning materials are available for this purpose
• In relation to the "compatibility of family and work", we have a wide range of offers, e.g. flexible working time models, childcare places at many locations, the possibility of trial part-time work or even a sabbatical

Jobs & Careers: https://jobs.siemens-energy.com/jobs