Software Architect for Security (BAMF)

Project overview

We are looking for an experienced Software Architect, specifically for the Security domain.

Responsibilities

Required Experience:

Interested? Please apply with your CV and indicate your remote hourly rate and on-site hourly rate for Nuremberg. Please briefly describe why you are a very good fit for the requirements - thank you!

• Development and regular review of IT security concepts for a central and large application in the asylum sector of the BAMF.
• Coordination with the contact persons of the IT Security Officer, the Federal Data Protection Officer, the Cyber Security team of the IT department, and other relevant areas regarding current guidelines and requirements for security and data protection in the development and operation of software.
• Creation of software architecture designs and description of concrete solution concepts, taking into account compliance with BAMF architecture and design principles as well as other EAM guidelines.
• Research and feasibility studies for the use of purchased or jointly used security solutions within the BAMF.
• Support, assistance, and consultation for development teams on security-relevant requirements during the implementation of services, functions, and interfaces.
• Documentation and evaluation of requirements and change requests for the existing system architecture from IT security concepts, data protection concepts, and penetration test results.
• Several years of experience in software architecture and design in larger project environments, ideally in public administration
• Participation in software development projects with .NET 6/8 Full Stack or Java Spring Boot
• In-depth knowledge of current security technologies and concepts such as OAuth2, Zero Trust, TLS, hashing methods
• Knowledge of guidelines and standards such as OWASP, BSI-IT Grundschutz, ISO 27001
• Understanding of potential vulnerabilities and general threat risks
• Very good experience in service-oriented and cloud-native architectures
• Software development or DevOps experience related to technology standards such as C#, .NET JavaScript, Java, Kubernetes, REST, OAuth 2.0, XML, JSON
• Archimate 3.x, UML, BPMN 2.0
• Certification iSAQB CPSA Foundational/Advanced Level
• Good knowledge of Domain Driven Design
• German language skills at least at level C1

Project details

from 01.11.2026

several years

approx. 130 hours/month

Remote share: approx. 90% remote (initially and then in exceptional cases in Nuremberg)

You will work in an agile development project for a central, large application in the asylum sector of the BAMF. You are part of a special team for architecture and security that supports other teams in the specification, implementation, and operation of a secure application. You will work closely with the roles of DevOps Engineering, Requirements Management, Full-Stack Development, and Testing.

The assignment can largely be carried out remotely.

However, presence at the BAMF site in Nuremberg would be advantageous for the first few weeks of onboarding or, in the further course, on individual weekdays for monthly team meetings or specific release dates (a total of approx. 3 days per month).

• Start: 2026-11
• Duration: 24 Monate
• Remote: hybrid
• Location: Nürnberg, Deutschland, DE
• Languages: German