Security Solutions Architect

Role: Solution & Infrastructure Security Architect

Work Mode: Work from Office

Relocation will also accepted

Description:

We are looking for a Senior/Principal Solution & Infrastructure Security Architect with 10+ years of experience who specializes in infrastructure security, PKI/certificate management, container security, network segmentation, and industrial IoT/OT-IT integration.

The candidate must be both an architect and a hands-on security engineer, capable of designing secure infrastructure and reviewing or writing Python/FastAPI integration code.

Must-have technical skills

• Network security: Network architecture, trust zones, segmentation, reverse proxy, TLS termination, OT-IT integration.
• Infrastructure security: Linux hardening, Docker, Docker Compose, Kubernetes, container isolation, secrets management, backup and disaster recovery.
• PKI and cryptography: X.509, PKI, TLS/mTLS, EST, Certificate Authority (CA) operations, HSM, PKCS#11 and SoftHSM.
• Application and API security: Authentication, authorization, service-to-service identity, OWASP vulnerabilities, tenant isolation and audit trails.
• Messaging security: MQTT broker authentication, authorization and ACLs; database access controls.
• DevSecOps and supply-chain security: SBOM, dependency management, artifact signing, CI/CD security and authenticated offline updates.
• Security operations and compliance: Logging, monitoring, incident response, Cyber Resilience Act (CRA) risk assessments and technical documentation.
• Hands-on development: Python, FastAPI, integration testing and the ability to review embedded C interfaces.