IT Security Architect – IAM, On-Premises

Job not on LinkedIn

🔥 16 minutes ago

🇩🇪 Germany – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

infoinfo

🗣️🇩🇪 German Required

Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of ESN

ESN

201 - 500 employees

Founded 2004

🍽️ Food & Beverage

🏥 Healthcare

🛍️ eCommerce

Food & Beverage • Healthcare • eCommerce

ESN is a German sports-nutrition and supplement brand operated by Fitmart GmbH & Co. KG that sells protein powders, vitamins, performance supplements, bars/snacks, and fitness apparel through an online shop. The site emphasizes muscle building, recovery, hydration and general fitness performance, offers promotions, subscription/newsletter marketing, and direct-to-consumer e-commerce features (localized shipping, payment options, and an outlet).

📋 Description

• Own the security target architecture and standards for identities and on-premises infrastructure • Design reference architectures for IAM, on-premises Active Directory, hybrid Entra ID integration, and on-premises infrastructure • Develop hardening, tiering, least-privilege, security-by-design, and secure administration concepts • Create binding security standards, guidelines, and Architecture Decision Records (ADRs) • Assess existing and planned solutions, identify vulnerabilities, and derive appropriate measures • Advise technical teams on the secure implementation of requirements • Select suitable IAM and security tools, and provide functional support and oversight during their implementation • Future expansion: Develop a reference architecture and standards for the secure separation and integration of OT/production systems at the Elmshorn site

🎯 Requirements

• Several years of experience in security architecture or identity/infrastructure security, with demonstrable results • In-depth understanding of IAM concepts and processes, including role models, recertification, access rights reviews, and PAM • Advanced knowledge of on-premises Active Directory, including hardening and tiering, and Microsoft Entra ID, including hybrid scenarios such as Conditional Access and PIM • Understanding of on-premises infrastructure and network security, including segmentation and secure access • Ability to establish standards, provide cross-functional advice, and support the professional development of colleagues • Structured and self-directed approach to work • Very good command of German and English • Experience in, or willingness to learn about, OT and production security

🏖️ Benefits

• Attractive employee discounts on ESN & More products • Flexible working hours and home-office options • Mobility and fitness subsidies, such as Wellpass and the Deutschlandticket • Company pension plan • Workation options and more

Apply Now

Similar Jobs

🕒 2 days ago

noris network AG

501 - 1000

💼 Consulting

📦 Logistics

☁️ SaaS

IT-Security Engineer für PKI- und HSM-Betrieb bei noris network, einem deutschen Cloud- und Datacenter-Anbieter. Planung hochverfügbarer Infrastrukturen, Kundenberatung und ITIL-Changes.

🗣️🇩🇪 German Required

Linux

🕒 3 days ago

vivenu

51 - 200

💼 Consulting

📣 Marketing

📦 Logistics

Senior AppSec Engineer building vivenu’s security program for global event-ticketing technology. Securing web, APIs, cloud infrastructure, Kubernetes, and CI/CD pipelines.

AWS

Azure

Cloud

Cyber Security

Google Cloud Platform

Kubernetes

Terraform

TypeScript

Go

🕒 3 days ago

SAP Fioneer

501 - 1000

💼 Consulting

🛡️ Insurance

📦 Logistics

Security GRC Specialist strengthening controls, risk management, and SOC 2/ISO 27001 compliance for SAP Fioneer's financial-services software. Supporting audits, remediation, and customer security reviews.

🗣️🇩🇪 German Required

Cloud

🕒 5 days ago

CREALOGIX

501 - 1000

💳 Fintech

🏦 Banking

☁️ SaaS

Information Security Expert strengthening CREALOGIX’s ISMS for digital banking technology solutions. Managing audits, risk assessments, security controls, and supplier security.

🗣️🇩🇪 German Required

Cloud

🕒 5 days ago

APT-ONE

2 - 10

🔒 Cybersecurity

🏢 Enterprise

🏭 Manufacturing

IT/OT Security Architect designing secure IT, OT, cloud, and AI architectures for Berlin-based cybersecurity consultancy APT-ONE. Translating regulatory requirements into controls and advising CISOs and technical leaders.

🗣️🇩🇪 German Required

AWS

Azure

Cloud

Google Cloud Platform

Kubernetes