Security Engineer - Lead Architect

Tasks

• Development and oversight of the target security architecture and roadmap; specification and RFP for formal architectures and components, including security authentication and access.
• Ensure that "nice guy" practices—which do not combine multiple tools at once or use legacy tools—are avoided, and that current and future costs are passed on.
• Review and revision of architectural decisions, taking into account both construction and operating costs.
• Publishing reference designs and providing path runs that are defined as the preferred solution within the tool.
• Leading and driving the security policy process for six active teams focused on data access.
• Design and implementation of the security policy, application, or. All systems and users, call.
• Mentoring architects and leading design reviews.
• Collaborate with Sales and Security Operations to plan for needs and infrastructure so that controls can be reviewed, monitored, and audited.
• Collaborate with the Infrastructure and Product teams to focus on new customers and solutions and to ensure that security and digital requirements are met once again.
• Identification of risks for network engineers, senior leadership, and non-technical stakeholders, and regular reporting on the status.

Requirements

• Substantial experience in security engineering or architecture, including end-to-end responsibility for the security architecture of production platforms.
• Strong Python skills and knowledge of one or more programming languages.
• Proficiency in one of the following: Kubernetes, Kafka, OpenStack, AWS, Azure, GCP.
• Infrastructure as Code (IaC) / DevSecOps / Secure DevOps Practices.
• In-depth knowledge of authentication, authorization, and access management (SSO/OIDC, OAuth, ACL/ABAC).
• Familiarity with cloud concepts (IaC / DevOps / Secure DevOps).
• Security of IT insights and LLM applications (long chain, access logs, and/or).
• Practical experience with WAF, SIEM, EDR, and other security tools.
• Strong proficiency in network security (firewalls, load balancers, NAT, and a wide range of technologies).
• A structured approach to threat modeling and risk assessment, as well as the ability to explain risks clearly to any audience.
• Experience in the financial services sector or in another highly regulated environment.

We offer

• A hybrid work model with 3 days in the office, which allows for the option of remote work.
• Company pension.
• Private health insurance.
• Extended maternity and paternity leave.
• Discounted parking.
• A range of employee stock plans.
• Gift Certificates and Rewards.
• Free weekly breakfast.
• Discounted on-site gym.