Solution & Infrastructure Security Architect

Candidates based in Germany, or with a German work permit, are preferred.

perimeter, infrastructure, IIDC Hub services, connections to message broker, IIDC Self Service Portal, manufacturer PKI and customer networks

• Network and trust-zone design, segmentation, reverse proxy / TLS termination, OT-IT integration
• Linux and OCI container hardening, container isolation, image provenance, secrets management, backup and disaster recovery
• Container runtime environments (Docker, Docker Compose, Kubernetes)
• API authentication/authorization, service-to-service identity, OWASP-class vulnerabilities, tenant isolation, audit
• MQTT broker authentication/authorization and ACLs, database access control
• Supply chain: dependency management, SBOM, artifact signing, CI/CD and secret security, authenticated offline updates
• Logging, monitoring, incident response, coordinated disclosure
• CRA risk assessment and technical documentation
• Writes and reviews Python/FastAPI backend and integration code, including tests
• Reads embedded C sufficiently to validate interfaces

IEC 62443, OT deployments, enterprise PKI/provisioning services, BRSKI/MASA, secure boot and firmware signing, penetration-test coordination