Security Solution Architect (m/w)

Ärztekasse is seeking a Senior Security Solution Architect in Urdorf, CH to design and enhance security architectures for its IT landscape, products, and eHealth services on a full-time, on-site basis.

This position focuses on reinforcing the security structure of the organization's technology ecosystem, covering infrastructure, applications, and eHealth offerings. The incumbent will be responsible for creating, evaluating, and refining security measures within a decentralized operational setting.

Responsibilities

• Establish and update the security framework for both cloud and on-premise infrastructure, networks, and applications.
• Develop and evaluate security designs by converting business needs into technical safeguards, utilizing principles like Zero Trust and Defense in Depth, and incorporating technologies such as SASE, IAM, WAF, and network security controls.
• Evaluate current and future architectures to pinpoint vulnerabilities, threats, and areas for enhancement.
• Produce comprehensive architecture records, security strategies, visual diagrams, and decision logs.
• Facilitate secure connections with external vendors, partners, and third-party systems.
• Provide guidance to infrastructure and development teams regarding security standards.
• Guarantee that security considerations are embedded throughout the lifecycle, from initial design to deployment and maintenance.
• Collaborate with internal groups and external collaborators to develop solutions that are secure, scalable, and easy to maintain.

Requirements

• Demonstrated experience working as a Security Architect.
• Solid background in architecting infrastructure, applications, networks, and security layers.
• Familiarity with SASE, Zero Trust, secure remote access, and network security frameworks.
• Proficient in WAF, reverse proxies, API protection, and web application security.
• Deep understanding of Identity and Access Management, covering Identity Providers, authentication, authorization, SSO, OAuth2, OpenID Connect, SAML, and policy-based access control.
• Strong analytical capabilities to navigate complex technical landscapes.
• Proven ability to document architectures, security concepts, and technical decisions.
• Capacity to translate business and security needs into actionable technical strategies.
• Effective communication skills for engaging with both technical and non-technical stakeholders.
• Fluent proficiency in English.

Nice to have

• Hands-on experience with Spring boot and .Net.
• Proficiency in German.
• Certifications or knowledge of NIST, CISSP, CISM, or CIS Controls.

About the company

The company fosters a professional yet friendly workplace with flat hierarchies and proactive team members. Employees have the opportunity to actively influence the eHealth sector and directly contribute their expertise and ideas to the solutions developed.

• Friendly and professional environment with flat hierarchies and proactive colleagues.
• Opportunity to actively shape the eHealth sector.
• Direct contribution of expertise and ideas to solutions.