Infrastructure Security Architect (PID0650)

This is a remote position. We are seeking a seasoned Senior Infrastructure Security Architect on a freelance basis to strengthen the global infrastructure security of a major energy client. You would be responsible for establishing clear security designs, technical standards, and risk frameworks to support large-scale enterprise delivery. Role Type: Contract (40 hours per week)

Rate: Daily rate available

Location: Remote with occasional onsite visits to Germany

Responsibilities

Convert security policies, operational risks, and system requirements into practical architecture designs, security controls, and engineering principles.

Lead comprehensive security evaluations and technical reviews for core infrastructure and enterprise platforms.

Author and maintain foundational architecture documentation, risk assessments, security baselines, and governance frameworks.

Define strategic security roadmaps aligned with business priorities, system vulnerabilities, and release schedules.

Perform structured threat assessments and security modelling across enterprise services and platform components.

Present complex technical risks and strategic trade-offs clearly to executive stakeholders to support informed decision-making.

Facilitate architecture reviews, guide technical discussions, and build consensus among multi-disciplinary teams with competing priorities.

Collaborate with engineering, operations, and cross-domain security teams to drive end-to-end alignment across the organisation.

Make decisive architectural rulings, prioritising high-impact controls over theoretical security improvements.

Requirements

Must-Have Experience

Broad, senior-level experience across infrastructure architecture (compute, networking, storage) and software security.

Proven track record of designing or overseeing security architecture for large-scale enterprise environments.

Strong stakeholder management skills, with experience working alongside senior leadership, engineering teams, operational leads, and external auditors.

Hands-on experience designing centralized identity, authentication, and access management architectures across complex distributed systems.

Demonstrated ability to resolve critical trade-offs between security controls, platform usability, system availability, and project deadlines.

Experience managing security incidents, vulnerability remediation programs, and regulatory or compliance audits.

Proven experience conducting formal threat modeling for enterprise systems.

Practical expertise integrating enterprise platforms with third-party Identity Providers (IdPs) and modern authentication standards.

Expertise designing access control flows for standard users, API-to-API communication, privileged administrative roles, and emergency access procedures.

Advanced knowledge and practical experience with secrets management, PKI, key management systems, and certificate lifecycles.

Practical knowledge of container security and cloud-native platform architectures.

Language: Advanced proficiency in English (at least C1 level).

Preferred Experience

Familiarity with software-defined networking, virtualization platforms, distributed storage systems, or bare-metal infrastructure.

Experience with workload identity framework implementations.

Background operating within highly regulated, sovereign, or security-sensitive environments.

In-depth platform security experience, particularly with custom or self-managed container orchestrators.

Exposure to modern development stacks, modern web frameworks, and relational databases.

Recognized industry certifications (such as CISSP, CCSP, SABSA, or CKS).

Eligibility Eligibility Residency in the EU, EEA, UK, or Switzerland.

Benefits

As a freelancer / contractor with us, you will enjoy flexible working hours and the freedom to choose your own projects. Our platform gives you access to exciting projects in various industries and supports you in advancing yourcareer. You'll benefit from competitive pay and a dedicated team to help you with any questions you may have. Work independently and utilise our strong network to achieve your professional goals.

Originally posted on Himalayas