Analyze and design security architectures for complex IT infrastructures, taking into account ISO 27001, BSI IT-Grundschutz and other relevant standards and guidelines
Conduct risk analyses and derive concrete, technically implementable security requirements
Develop and independently implement preventive protection measures at the architecture and design level (cloud, on-premises, Kubernetes)
Integrate security requirements into existing systems, architectures and CI/CD pipelines (DevSecOps)
Advise clients—especially in the public sector—on regulatory requirements in the context of modern IT and cloud infrastructures (e.g. DORA, NIS2, KRITIS)
Establish and further develop information security and emergency management systems
Enable development and operations teams to independently implement security requirements
Create and maintain security documentation and conduct training and awareness measures

Degree in a STEM subject or equivalent qualification
Solid, hands-on experience in cyber or IT security with a focus on technical implementation
Deep understanding of security standards and their practical application (ISO 27001, BSI IT-Grundschutz)
Familiarity with EU regulations (NIS2, DORA, Cyber Resilience Act, BAIT/VAIT, KRITIS) and the ability to translate them into technical measures
Experience in designing, assessing and implementing security architectures—ideally in heterogeneous environments (cloud, on-premises, OT/IT)
Experience with cloud infrastructures and major hyperscalers (AWS, Azure, GCP)
Practical experience with DevSecOps principles and integrating security into CI/CD pipelines and agile development processes
Willingness to travel within Germany (on average up to 3 days/month)
Willingness to undergo security screening (SÜ1 or SÜ2) under the Security Clearance Act (SÜG)
Very good German and English language skills

Flexibility & Remote-First: Flexible working hours and 100% remote work, with occasional travel within Germany
Modern hardware & workstation: MacBook or Windows device of your choice and additional equipment for your home office setup
Vacation & Bonus: 30 days of vacation per year and a performance-based annual bonus (up to one month’s salary)
Training & Development: Annual training budget along with individualized career planning and mentoring
Team & Culture: Comprehensive onboarding and buddy program, several team events per year, short communication channels and a collaborative team that shares knowledge and drives impact
Corporate Benefits: Choose between Urban Sports Club, Wellpass or a SpenditCard worth €50 monthly (tax-free) and benefit from additional offerings such as JobAuto, D-Ticket subsidy, company pension plan and employee discounts

IT Security Architect

Key skills