15.06.2026 aktualisiert


100 % verfügbar
Senior Information Security Architect (IT/OT) | Zero Trust & Risk Management Specialist | SC Cleared
Hamburg, Deutschland
Nur Remote
University DegreeÜber mich
Freelance Information Security Architect with 25+ years of experience in designing and implementing enterprise-grade security solutions across banking, aerospace, manufacturing, pharmaceutical and technology sectors.
Skills
Cloud-SicherheitInformationssicherheitGovernance-Risikomanagement und ComplianceNetwork SecurityRemote Access ServiceZero Trust Network AccessVulnerability ManagementSicherheitssystemeIT-ArchitekturFirewallsFortinet
IT & OT Security Architecture
Comprehensive expertise in designing and implementing security architectures for both IT and OT environments, including Zero Trust models, network security, and risk management frameworks.
Network Security Engineering
Advanced skills in network security design, implementation and management including firewalls, VPNs, secure remote access, and network segmentation using technologies like FortiGate, Zscaler, and Cisco solutions.
Cybersecurity Risk Management
Extensive experience in conducting risk assessments, vulnerability management, security governance, and compliance with regulatory requirements across multiple industry sectors.
Zscaler Cloud Security Platform
Deep expertise in Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX) implementation and management.
Fortinet Security Solutions
Comprehensive knowledge of FortiGate firewalls, FortiManager, FortiAnalyzer, and related Fortinet security products for enterprise deployments.
Professional Security Certifications
Multiple industry certifications including CISSP, ITIL v3, FCNSP, CCNP, MCSA, and CWNA demonstrating broad security expertise.
API Integration and Automation
Experience with API integration between security platforms, automation solutions, and service management tools like ServiceNow and Azure API Management.
Cloud Security Architecture
Knowledge of cloud security implementations, Azure AD integration, and hybrid cloud security models for enterprise environments.
Comprehensive expertise in designing and implementing security architectures for both IT and OT environments, including Zero Trust models, network security, and risk management frameworks.
Network Security Engineering
Advanced skills in network security design, implementation and management including firewalls, VPNs, secure remote access, and network segmentation using technologies like FortiGate, Zscaler, and Cisco solutions.
Cybersecurity Risk Management
Extensive experience in conducting risk assessments, vulnerability management, security governance, and compliance with regulatory requirements across multiple industry sectors.
Zscaler Cloud Security Platform
Deep expertise in Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX) implementation and management.
Fortinet Security Solutions
Comprehensive knowledge of FortiGate firewalls, FortiManager, FortiAnalyzer, and related Fortinet security products for enterprise deployments.
Professional Security Certifications
Multiple industry certifications including CISSP, ITIL v3, FCNSP, CCNP, MCSA, and CWNA demonstrating broad security expertise.
API Integration and Automation
Experience with API integration between security platforms, automation solutions, and service management tools like ServiceNow and Azure API Management.
Cloud Security Architecture
Knowledge of cloud security implementations, Azure AD integration, and hybrid cloud security models for enterprise environments.
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2013
Sprachen
EnglischverhandlungssicherFranzösischverhandlungssicherItalienischverhandlungssicherRumänischMuttersprache
Projekthistorie
Provided security risk management, architecture and governance consulting within enterprise IT & OT environments, supporting regulatory compliance and risk mitigation strategies.
Responsibilities
Conducted security risk assessments across enterprise software and infrastructure systems
Developed risk mitigation strategies aligned with corporate security policies
Supported regulatory compliance and governance activities
Delivered security reporting and recommendations to senior stakeholders
Achievements
Successfully mitigated every security risk assigned, preventing them from escalating to the Security Board for acceptance
Supported adoption of emerging security practices related to AI technologies
Designed and implemented network security standards, best security practices and Zero Trust.
Responsibilities
Owned and governed enterprise-wide network security services, ensuring alignment with corporate security standards and Zero Trust principles across IT and OT environments.
Reviewed and approved security architectures, firewall changes, external connectivity, and secure remote access solutions (Zscaler ZPA, IPSec VPN), reducing exposure to unauthorized access.
Led and contributed to key security transformation initiatives, including FortiGate deployments, firewall segmentation, policy standardization, and iDMZ design.
Drove the adoption of Zero Trust architecture by evaluating and integrating modern security solutions, improving overall security posture and access control maturity.
Acted as a central decision authority for secure connectivity (suppliers, remote access, privileged access), balancing risk mitigation with business enablement.
Collaborated with global stakeholders across IT and OT to enhance plant and enterprise security while supporting digitalization initiatives.
Achievements
Strengthened segmentation and access control across IT/OT environments through standardized firewall policies and Zero Trust design.
Improved operational efficiency and security governance by streamlining Zscaler policies and remote OT connectivity.
Provided consultancy on the secure integration and automation between Zscaler and ServiceNow
Responsibilities
Designed and implemented API-driven automation between Zscaler and ServiceNow using Azure API Management, enabling scalable and consistent security workflows.
Optimized Zscaler (ZIA/ZPA) configurations by applying best practices, improving performance, policy consistency, and security effectiveness.
Produced detailed technical documentation, architecture diagrams, and process flows to support automation and operational handover.
Collaborated with cross-functional teams to deliver end-to-end integration and ensure successful testing and deployment.
Provided technical guidance and stakeholder presentations, translating complex implementations into business-relevant outcomes.
Achievements
Delivered a fully integrated automation solution reducing manual intervention in Zscaler-ServiceNow processes.
Enhanced visibility and control over security workflows through structured API integration.