Required skills
- Security Architecture
- Secure SDLC
- Threat Modeling
- Application Security
- IAM
- Authorization Concepts
- DevSecOps
- Software Supply Chain Security
- SAST
- SCA
- Vulnerability Management
- BSI IT-Grundschutz
Languages: German
Job description
We are looking for an Architect with a focus on Security for a client in the public sector. The role involves developing security architectures, conducting risk analyses, and ensuring the security of software development and supply chains.
Project overview
For our client in the public sector, we are currently looking for an Architect with a focus on Security.
Responsibilities
Knowledge:
- Development and anchoring of a security architecture and Secure SDLC guidelines
- Structuring of relevant BSI requirements and transfer into comprehensible requirement and evidence matrices
- Execution and control of protection needs, threat, and risk analyses
- Definition and integration of security gates and security proofs into development and delivery processes
- Design of IAM, role and authorization concepts, secrets management, and logging
- Securing source code, artifacts, and software supply chain
- Security architectural assessment of cloud, container, and platform solutions
- Coordination of information security, DevSecOps, testing, architecture, and operations
- Documentation and handover of security guidelines and decisions to internal roles
- Profound experience in Security Architecture and Secure SDLC
- Good knowledge in Threat Modeling and Application Security
- Experience with IAM and authorization concepts
- Profound knowledge in DevSecOps and Software Supply Chain Security
- Experience with SAST, SCA, and vulnerability management
- Knowledge in risk, exception, and evidence management
- Profound knowledge of BSI IT-Grundschutz, especially relevant CON/APP modules
- Experience in KRITIS or high-security environments is an advantage
- Knowledge in OWASP and secure web application development
- Experience with OpenShift/Kubernetes Security
- Knowledge of SonarQube and security analysis tools
- Experience with secure integration of legacy/COBOL systems is an advantage
Project details
Mid-October 2026
until 10/15/2027 (with option for extension)
Assignment: 85% Remote, 15% on-site (willingness to travel desired)
- Start: 2026-10
- Remote: hybrid
- Location: Berlin, Deutschland, DE
- Languages: German
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on FreelancerMap DE