Solution & Infrastructure Security Architect

Position Name : Solution & Infrastructure Security Architect Location : Dresden, Germany Experience : 10+ years Work Location : Dresden, Germany Expected Notice Period : 0-15 Days Role of Engineer : Solution & Infrastructure Security Architect Job Description Roles: 1. Solution & Infrastructure Security Architect

• Level: Senior / Principal, 10+ years
• Focus: perimeter, infrastructure, IIDC Hub services, connections to message broker, IIDC Self Service Portal, manufacturer PKI and customer networks

• Network and trust-zone design, segmentation, reverse proxy / TLS termination, OT-IT integration
• Linux and OCI container hardening, container isolation, image provenance, secrets management, backup and disaster recovery
• Container runtime environments (Docker, Docker Compose, Kubernetes)
• API authentication/authorization, service-to-service identity, OWASP-class vulnerabilities, tenant isolation, audit
• X.509/PKI, TLS/mTLS, EST, CA operation, key custody via PKCS#11 / SoftHSM / HSM
• MQTT broker authentication/authorization and ACLs, database access control
• Supply chain: dependency management, SBOM, artifact signing, CI/CD and secret security, authenticated offline updates
• Logging, monitoring, incident response, coordinated disclosure
• CRA risk assessment and technical documentation
• Writes and reviews Python/FastAPI backend and integration code, including tests
• Reads embedded C sufficiently to validate interfaces
• Nice to have: IEC 62443, OT deployments, enterprise PKI/provisioning services, BRSKI/MASA, secure boot and firmware signing, penetration-test coordination
• Out of scope: deep firmware and secure-element implementation

WORK FROM OFFICE ONLY