Platform Security Architect

Conrad Electronic SE

Job

In this role, you will develop security architectures for cloud-native environments and implement security policies while training IT teams in 'Secure-by-Design' principles.

Job summary

This listing has been machine translated. Show original

Job technologies

Your role in the team

  • You are the operational and strategic head behind our secure architecture landscape.
  • As a Platform Security Architect, you are the primary security expert for our infrastructure and development teams.
  • In addition to your daily operational tasks, you focus on establishing a Security Governance, securing our cloud-native environments, and promoting our ISO 27001 compliance and the maturity of our Zero-Trust approach.
  • You act as a link between development, operations, and compliance.
  • You are leading the adaptation of our technical infrastructure to ISO 27001 standards.
  • You define, maintain, and implement security policies and procedures across the organization.
  • You design and optimize the architecture for our cloud-native environments, with a particular focus on managing CNAPP solutions and workflows to ensure comprehensive transparency and protection.
  • You collaborate with the development teams and incorporate security considerations into the development lifecycle to ensure that threat modeling and vulnerability management are seamlessly integrated into our technologies and processes.
  • As the central contact person for our development and infrastructure teams, you will train them in the principles of 'Secure-by-Design' and help them balance the speed of feature development with robust security controls.
  • You implement proactive vulnerability management processes, prioritize risks based on their business relevance, and ensure that remediation measures are tracked and effectively implemented.

Our expectations of you

Education

  • A degree in the fields of (IT) security, computer science, or a related discipline.

Qualifications

  • In-depth knowledge in the field of cloud-native security, including CNAPP tools, container security, and securing Infrastructure-as-Code.
  • You understand the PDCA cycle (Plan-Do-Check-Act) and know how to translate control measures into actionable technical tasks.
  • You can translate complex security requirements into simple, actionable guidelines for teams outside the security domain.
  • You possess the persistence to drive change and the empathy to foster a 'Security-by-Default' culture.
  • You have a strong understanding of modern threat scenarios and defense mechanisms in hybrid environments (e.g., OWASP Top 10, Zero Trust principles).
  • You possess solid knowledge in the fields of software architecture and system design and successfully apply common architectural patterns.
  • Ideally, you hold certifications such as CISSP, CISM, or certifications in cloud-native security (e.g., CCSP, Azure/GCP security architecture certifications).
  • You have very good English skills (C1); German skills are an advantage.

Experience

  • At least 10 years of experience in software development, including a minimum of 5 years in a key role with security responsibilities within an organization with more than 5 development teams.
  • Proven experience in the application and auditing of frameworks such as ISO 27001.

What we offer

  • Conrad offers you the optimal opportunity to actively shape the company's future and develop yourself in an open and empathetic work environment.
  • We have been recognized by the Great Place to Work Institute for this unique corporate culture.
  • Through flexible working hours, hybrid work arrangements, and special leave, you have the opportunity to tailor your workday to your individual needs.
  • Your Nachwuchs is also close to our hearts: At our central location in Hirschau, our 'Conrad Kids' are lovingly cared for in our company daycare center.
  • We are a family-owned business, so a familial atmosphere is particularly important to us.
  • Our 'Du' culture is not only communicated but also genuinely practiced, just like our flat hierarchies.
  • Therefore, we offer you a variety of services related to health prevention.
  • Regular health checks and preventive examinations are particularly emphasized.
  • For sports enthusiasts, we also offer the opportunity at our Hirschau location to energize themselves in our Conrad Sports Club through various sports, courses, or on our company-internal tennis courts.
  • A healthy lifestyle naturally also includes a balanced diet.
  • Therefore, we place particular emphasis on regionality and freshly prepared meals in our canteens (Hirschau/Wernberg).

Benefits

Topics you will work on

Job locations

Map of the job locations
© OpenMapTiles, © OpenStreetMap contributors
  • Location Hirschau
    92242 Bayern, Germany

About your employer

Conrad is a leading player in the world of technology and electronics, conquering the tech retail sphere with its innovative spirit and ambition. We are available online 24/7 for both business and private customers, offering professional consultation.

Company size
250+ Employees
Company type
Established Company
Work model
Onsite, Hybrid, Full Remote
Industry
Industry, Production
  • Würth Elektronik GmbH & Co. KGWaldenburg, Berlin, Munich

    • Easy Apply
    • Hybrid
    • Onsite
    • Part Time/Full Time

    You’ll be joining at a stage where we’re building and evolving our new CRM platform. That’s exactly what makes this role special: you won’t just develop features—you’ll actively help shape the technical foundation of a modern CRM ecosystem. Together...

    • Microsoft Dynamics
    • TypeScript
    • C#
    • RESTful API
    • Azure
    • Microsoft Power Platform
    • JavaScript
    • +3
    • +4
  • Tröger & Cie. AktiengesellschaftNuremberg, Regensburg, Bayreuth

    • Easy Apply
    • Hybrid
    • Onsite
    • Full Time

    Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...

    • Ethernet
    • C
    • Git
    • Python
    • Bash
    • Linux
    • C++
    • CAN
    • J1939
    • +4
    • +5
  • Die Deutsche RentenversicherungBerlin

    • Hybrid
    • Onsite
    • Part Time/Full Time

    Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...

    • Docker
    • GitLab
    • Jenkins
    • OpenShift
    • Grafana
    • PostgreSQL
    • ArgoCD
    • +2
    • +4

Platform Security Architect

Conrad Electronic SE