IT/OT Security Architect
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
IT/OT Security Architect designing secure IT, OT, cloud, and AI architectures for Berlin-based cybersecurity consultancy APT-ONE. Translating regulatory requirements into controls and advising CISOs and technical leaders.
Responsibilities:
- Design and further develop security architectures across IT, OT, cloud, and AI systems
- Design secure cloud and hybrid architectures using Azure, AWS, and GCP, including landing zones, identity and network design, encryption, and security baselines
- Create target architectures, security roadmaps, and migration paths for cloud transformations and multi-cloud environments
- Conduct threat modeling, architecture reviews, and risk analyses
- Design network and perimeter security, including segmentation, firewalling, and Zero Trust Network Access
- Develop IAM and PAM architectures as well as cryptography and PKI concepts
- Assess and secure cloud platform services, container/Kubernetes environments, and CI/CD pipelines (DevSecOps)
- Define security requirements for projects, products, cloud providers, and service providers
- Translate regulatory requirements into technical specifications and auditable controls
- Provide expert advice to CISOs, cloud teams, architecture boards, and technical decision-makers
- Create security concepts, policies, and technical documentation
- Use AI-assisted tools for discovery, architecture reviews, and documentation, including expert validation and approval
Requirements:
- Confidently use AI tools in day-to-day consulting, including critically evaluating their results
- Strong awareness of confidentiality when using AI; knowledge of permitted data use and risks such as data leakage, model training, and prompt injection
- Willingness to continuously develop processes and products using AI
- At least 3–5 years of experience in IT/cybersecurity, including several years in architecture or consulting roles
- Broad understanding of networking, endpoints, identity, applications, and cloud technologies
- Experience with Zero Trust and segmentation concepts as well as IAM/PAM (Entra ID, Active Directory)
- Proficiency in ISO 27001, BSI IT-Grundschutz, NIST CSF, MITRE ATT&CK, and SABSA/TOGAF
- Knowledge of cryptography, PKI, and secure application design
- Business-fluent German and English
- Highly desirable: cloud architecture expertise, prompt engineering, AI agents or LLM integration, AI governance, and experience in regulated environments
- Certifications (nice to have): CCSP, CCSK, Microsoft SC-100, Azure AZ-305, AWS Solutions Architect Professional, AWS Security Specialty, Google Professional Cloud Architect, Google Professional Cloud Security Engineer, CISSP, CISSP-ISSAP, SABSA SCF, TOGAF, CISM, OSCP
Benefits:
- Base salary starting at €80,000 plus profit sharing of up to €70,000
- Flexible working hours
- Remote work
- 30 days of annual leave
- IT equipment, such as an Apple MacBook
- Regular team events
- Company pension plan and health insurance
- Shopping and employee discounts
Similar Jobs
Security Engineer
Security Engineer securing PIP Labs’ DATA Network infrastructure, cloud environment, endpoints, and internal systems. Automating security operations and protecting sensitive real-world data used for AI training.
Senior macOS Engineer – Workforce AI Security
Senior macOS Engineer owning native endpoint security agents for Check Point’s enterprise AI platform. Building TLS interception, proxy controls, and data-loss protections across managed Macs.
Security Captain – Rotational
Security Captain supervising personnel and protective operations at NMS’s remote Alpine oil field. Managing incidents, emergency response, client coordination, and rotational camp operations.
Senior Security Engineer, Threat & Offensive Security
Senior Security Engineer strengthening offensive security and threat operations. Protecting Valon’s AI-native mortgage servicing platform for regulated finance.
Global Security Architect
Security Architect designing Microsoft 365, Azure, and hybrid security architectures for base-IT’s SME and enterprise customers. Leading security roadmaps, workshops, migrations, and technical standards.
Workday Security Developer
Workday Security Developer building complex enterprise applications and integrations for Carilion Clinic. Leading architecture, troubleshooting, technical standards, and large-scale healthcare technology initiatives.
Specialised Sales, OT Security
OT Security Sales Specialist developing tailored B2B cybersecurity solutions for Swisscom clients. Driving technical sales, new business, upselling, and cross-selling across industrial sectors.
Information Security Consultant
Information Security Consultant advising German cloud, AI, and data-center companies on ISMS and compliance. Delivering audit-ready policies, gap analyses, and practical security solutions.
Senior Information Security Manager
Senior Information Security Manager leading security operations, incident response, and AI governance. Protecting 8am’s payments and workflow platform serving 250,000 U.S. professionals.
Information Security Engineer
Information Security Engineer securing 8am’s cloud, detection, and compliance systems. Protecting fintech software used by over 250,000 U.S. professionals.
Cybersecurity Vulnerability Management Lead
Cybersecurity Vulnerability Management Lead modernizing the NSF Cybersecurity Program for Cherokee Federal. Leading exposure management, prioritization, automation, and enterprise risk reduction.
Senior Director, Information Security and Compliance
Senior security leader advancing Foundant’s SaaS information security and GRC programs. Protecting mission-critical software serving foundations, nonprofits, and community organizations worldwide.
Security Engineer – GRC
Security Engineer owning governance, risk, and compliance for Alan’s health insurance and prevention platform. Managing ISO 27001, DORA, HDS, audits, risk, and security automation.
Associate Security Architect
Associate Security Architect detecting and mitigating cyberattacks for Akamai's managed security customers. Protecting digital properties through Akamai's distributed cloud, edge, and security platform.
Cloud Security Engineer
Cloud Security Engineer securing Azure infrastructure, identities, and AI workloads for a global IT transformation leader. Driving remediation, policy-as-code guardrails, and Microsoft Defender for Cloud posture improvement.
Portuguese Speaking Cybersecurity Customer Expert
Cybersecurity customer experts supporting Portuguese-speaking clients with security software and incident inquiries. Mercier Consultancy Group provides recruitment and BPO services across Europe.
Senior Cybersecurity Financial Compliance SME
Senior cybersecurity compliance SME ensuring DoW and Army audit readiness for ASRC Federal’s Vantage system. Applying NIST controls, FIAR requirements, and financial management overlays.
Security Architect
Arquiteto de Segurança da Informação na Verity, consultoria de transformação e engenharia digital. Projetando controles, riscos e práticas DevSecOps para ambientes Cloud e on-premises.
Security System Analyst – Lenel, Milestone
Security Systems Analyst supporting Lenel OnGuard and Milestone physical security systems for Securitas UK. Owning incident resolution, troubleshooting faults, and coordinating third-party engineers.
Signalling Security Specialist
Telecom signalling security specialist auditing telecom networks with PTA and supporting PTM IDS deployments. Delivering customer reports, presentations, troubleshooting, and operational improvements.