IT Security Architect

ARES Consulting GmbH

IT Security Architect designing security architectures considering relevant standards and regulations. Involved in risk analysis, security measures development, and client advisory for public sector.

Posted 6/24/2026full-timeRemote • 🇩🇪 GermanyMid-LevelSenior💰 €70,000 - €90,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetes

About the role

Key responsibilities & impact

Analyze and design security architectures for complex IT infrastructures, taking into account ISO 27001, BSI IT-Grundschutz and other relevant standards and guidelines
Conduct risk analyses and derive concrete, technically implementable security requirements
Develop and independently implement preventive protection measures at the architecture and design level (cloud, on-premises, Kubernetes)
Integrate security requirements into existing systems, architectures and CI/CD pipelines (DevSecOps)
Advise clients—especially in the public sector—on regulatory requirements in the context of modern IT and cloud infrastructures (e.g. DORA, NIS2, KRITIS)
Establish and further develop information security and emergency management systems
Enable development and operations teams to independently implement security requirements
Create and maintain security documentation and conduct training and awareness measures

Requirements

What you’ll need

Degree in a STEM subject or equivalent qualification
Solid, hands-on experience in cyber or IT security with a focus on technical implementation
Deep understanding of security standards and their practical application (ISO 27001, BSI IT-Grundschutz)
Familiarity with EU regulations (NIS2, DORA, Cyber Resilience Act, BAIT/VAIT, KRITIS) and the ability to translate them into technical measures
Experience in designing, assessing and implementing security architectures—ideally in heterogeneous environments (cloud, on-premises, OT/IT)
Experience with cloud infrastructures and major hyperscalers (AWS, Azure, GCP)
Practical experience with DevSecOps principles and integrating security into CI/CD pipelines and agile development processes
Willingness to travel within Germany (on average up to 3 days/month)
Willingness to undergo security screening (SÜ1 or SÜ2) under the Security Clearance Act (SÜG)
Very good German and English language skills

Benefits

Comp & perks

Flexibility & Remote-First: Flexible working hours and 100% remote work, with occasional travel within Germany
Modern hardware & workstation: MacBook or Windows device of your choice and additional equipment for your home office setup
Vacation & Bonus: 30 days of vacation per year and a performance-based annual bonus (up to one month’s salary)
Training & Development: Annual training budget along with individualized career planning and mentoring
Team & Culture: Comprehensive onboarding and buddy program, several team events per year, short communication channels and a collaborative team that shares knowledge and drives impact
Corporate Benefits: Choose between Urban Sports Club, Wellpass or a SpenditCard worth €50 monthly (tax-free) and benefit from additional offerings such as JobAuto, D-Ticket subsidy, company pension plan and employee discounts

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cyber securityIT securitysecurity architecture designrisk analysispreventive protection measuresDevSecOpssecurity documentationtechnical implementationcloud securityagile development

Soft Skills

advisory skillstraining and awarenesscommunication skillsteam collaborationproblem-solving

Certifications

ISO 27001SÜ1SÜ2