Solution & Infrastructure Security Architect

Position Name : Solution & Infrastructure Security Architect

Location : Dresden, Germany

Experience : 10+ years

Work Location : Dresden, Germany

Expected Notice Period : 0-15 Days

Role of Engineer : Solution & Infrastructure Security Architect

Job Description

Roles:

1. Solution & Infrastructure Security Architect

• Level: Senior / Principal, 10+ years 

• Focus: perimeter, infrastructure, IIDC Hub services, connections to message broker, IIDC Self Service Portal, manufacturer PKI and customer networks 

• Must have: 

• Network and trust-zone design, segmentation, reverse proxy / TLS termination, OT-IT integration 

• Linux and OCI container hardening, container isolation, image provenance, secrets management, backup and disaster recovery 

• Container runtime environments (Docker, Docker Compose, Kubernetes) 

• API authentication/authorization, service-to-service identity, OWASP-class vulnerabilities, tenant isolation, audit 

• X.509/PKI, TLS/mTLS, EST, CA operation, key custody via PKCS#11 / SoftHSM / HSM 

• MQTT broker authentication/authorization and ACLs, database access control 

• Supply chain: dependency management, SBOM, artifact signing, CI/CD and secret security, authenticated offline updates 

• Logging, monitoring, incident response, coordinated disclosure 

• CRA risk assessment and technical documentation 

• Writes and reviews Python/FastAPI backend and integration code, including tests 

• Reads embedded C sufficiently to validate interfaces 

• Nice to have: IEC 62443, OT deployments, enterprise PKI/provisioning services, BRSKI/MASA, secure boot and firmware signing, penetration-test coordination 

• Out of scope: deep firmware and secure-element implementation 

 WORK FROM OFFICE ONLY