Beschreibung
Westhouse is one of the leading international recruitment agencies for the procurement of highly qualified experts in fields such as IT lifecycle management, SAP, engineering, commerce and specialist consultancy.For our client we are currently looking for a
Domain Architect Security (m/f/d)
General information
Reference: 167618
Location: Remote und Berlin
Start: 18.03.2024
Volume: full-time
Languages: deutsch und Englisch
Your Skills
- Thales HSM
- HashiCorp Vault (PKI, ACME)
- RedHat IPA/Certificate System (PKI, ACME)
- DigiCert PKI
- NG FW - Palo Alto, Fortinet
- Linux FW - UFW, firewalld
- Secure Client Access solutions (VPN) – PA, Fortinet, other …
- Zero Trust architectures (internal engineering/admins and customer access)
- IDS/IPS architectures – monitoring, detection and intervention through automated processes.
- Day0 monitoring/analysis/prevention (as per previous point)
- IAM / AAA solutions for internal administration individuals/systems and for customer access (remote
- IAM – HashiCorp Vault, RedHat IPA, freeRadius, …
- DNSSec
- Observability Solutions - Logging/Metrics - Loki, Grafana, Prometheus, ELK, …
- Network Routing Protocol Security
- Server endpoint security – immutable OS’s
- Linux Security
- Windows Security
- Packet Inspection Skills
Your Tasks
- The Security Architect is responsible for the following technology areas.
- PKI (HSM, CA, ACME, …) - Private & Public
- Firewalls (Internet, Internal, Customers, Network/App Policy, OS FWs: NG, UFW, firewalld etc)
- Zero Trust - Core & Customer
- Intrusion Detection/Prevention
- Day0 Analysis & Remediation
- Client Access
- IAM (Services, Apps, Admins, Customers (Client Access) Technology Platforms)
- “Infrastructure Platform Wide Security” (Compute, Network, Virtualization, Storage, Iaas, …)
Position Description
- The infrastructure product group offers data center services that are provided via a software stack for other product lines within the program. The Security Architect is member of the Infrastructure Architecture team.
- The architect is responsible for aligning with the strategy and vision of the Lead Infrastructure Architect and with other architects in the group (i.e., network, storage, software architects). The Security Architect is responsible for architecture of Infrastructure wide security including Network, Compute, Virtualization, Storage and Software, and for products provided to EDP Infrastructure customers. The architect does this in conjunction and through consultation with the other infrastructure technology architects.
- The EDP project is in a startup mode and requires that architects are also engineers, meaning that the architects can understand engineering problems and solutions within their architecture space. They are also expected to be able to provide POCs of their solutions working alongside technical engineers to prove solutions are viable.
- The architect must also be cost conscious, have a holistic approach and be aware of what the impact of the solution is short term and long term to both overall strategy, engineering and customer products. Within the Infrastructure product line, the engineering target is to be fully automated throughout any internal or external product lifecycle. The goal is to build a fully automated environment where all steps after physical installation will be automated. Therefore, the architects and engineers require the ability to align with the IaaS team who implement the steps to automate the environment
Interested?
We look forward to receiving your application documents in electronic form.
Your Contact:
Patrick Hoening