> Markdown version of [/jobs/ext/1982428-75-remote-infrastructure-security-architect-cloud](https://www.wearedevelopers.com/jobs/ext/1982428-75-remote-infrastructure-security-architect-cloud). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # 75% remote: Infrastructure Security Architect Cloud - **Company:** Nemensis - **Location:** Frankfurt am Main, Germany (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Cloud Computing, Cyber Security, Software Design Patterns, Distributed Data Store, Distributed Systems, Python (Programming Language), Key Management, PostgreSQL, Sherwood Applied Business Security Architecture, VMware Infrastructure, Virtual Machines, Virtualization Technology, Software Vulnerability Management, Fastapi, SDN Network, Bare Metal - **Published:** August 8, 2026 - **Apply:** https://www.adzuna.de/details/5830752667 ## About the Role Skills (must-have): - Extensive experience (15+ years) in similar architecture and security roles with broad knowledge across core infrastructure (compute, network, storage) and software - Owned or substantially influenced the security architecture of a complex distributed system - Demonstrated ability to work with senior engineers, product owners, operations teams, enterprise security functions, vendors, auditors, and architects from other teams. - Designed an identity or authorization model spanning multiple services and infrastructure components - Resolved difficult security trade-offs involving availability, usability, delivery pressure, or organizational boundaries - Worked across multiple infrastructure and software domains - Participated in security incidents, major vulnerability remediation, security audits and design reviews - Significant experience in leading structured threat-modelling efforts - Proven experience integrating platforms with an external identity providers and different protocols - Proven experience in designing authentication flows for interactive users, service-to-service calls, administrator and break-glass access. - Expert level understanding and hands on experience with secret, certificate and key management systems - Professional experience with container and Kubernetes security concepts Skills (should-have): - Experience with virtualization, software-defined networking, distributed storage and bare-metal provisioning technologies - Experience with SPIFFE/SPIRE or another workload-identity platform - Experience operating in restricted, sovereign, or otherwise highly controlled environments - Deep Kubernetes security experience, ideally across self-hosted control planes - Hands-on security experience with Python, FastAPI, Pydantic, PostgreSQL, and common Python authentication or authorization libraries - Any relevant certifications, such as: - CISSP, CCSP, or equivalent broad security certification - SABSA or comparable security-architecture training - CNCF CKS ## Description The architecture group within the Infrastructure Product Line (Infra PL) of the project is responsible for designing and evolving a distributed system that provides basic virtual infrastructure such as object storage or virtual machines to other product lines within the program. The Infra PL stack represents the foundational layer of the platform and covers a wide set of technologies, ranging from bare-metal hardware and multi-vendor networking and storage solutions to in-house developed software services and APIs. We are looking to further improve our overall security posture in this complex environment and are seeking the help of experienced security experts. Objective: Improve the security posture of Infra PL products, services and applications through the creation of documented security requirements, architecture standards, security assessments and governance artifacts aligned with program requirements and NFRs. Tasks: - Translate threats, organizational policies and NFRs into implementable requirements, design patterns and engineering guardrails. - Coordinate and lead security reviews for software and core infrastructure systems. - Create and maintain written communication and documentation, including - Security standards - Risk statements - Architecture principles - Architecture Decision Records (ADRs) - Security control definitions - Governance artifacts ## Related Videos - [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices) - [Optimizing Discovery: PostgreSQL's Role in Transforming GetYourGuide's Search](https://www.wearedevelopers.com/videos/1647-optimizing-discovery-postgresql-s-role-in-transforming-getyourguide-s-search) - [Intro to FastAPI](https://www.wearedevelopers.com/videos/462-intro-to-fastapi) - [Single Server, Global Reach: Running a Worldwide Marketplace on Bare Metal in a Cloud-Dominated World](https://www.wearedevelopers.com/videos/1206-single-server-global-reach-running-a-worldwide-marketplace-on-bare-metal-in-a-cloud-dominated-world) - [Scaling: from 0 to 20 million users](https://www.wearedevelopers.com/videos/676-scaling-from-0-to-20-million-users) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)