Security Solution Architect @ Mindbox Sp.z.o.o.

Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level. Experience and understanding of both the roles and interlock between enterprise & solution architecture. Experience in both operational and transformation cybersecurity roles or a clear working understanding of both perspectives. Secrets Management: Experience of designing solutions using SM tools such as HashiCorp Vault. Experience of developing secrets management patterns and championing designs through architecture governance forums. Experience of designing or implementing Workload Identity Frameworks within large scale enterprises. Federated Identity Management: Enabling identity sharing and single sign-on across different organisations or domains. Privileged Access Management (PAM): Securing, controlling, and monitoring access to critical systems by privileged users. Authentication Protocols: Implementing secure authentication mechanisms like Kerberos, OAuth, and SAML. CISSP/CISM certification or other broad cybersecurity industry-recognised certificate. SABSA or TOGAF certified preferred. BizzDesign, Archi, or generic UML visualisation experience for high-level designs. Creating an inspiring place to thrive for the talented, we use their expertise and courage to introduce the technology of the future into your business. - This is the foundation of Mindbox and the goal of our business and technology journey. We operate and develop in four areas: 🤖 Autonomous Enterprise - automation of business processes using RPA, OCR, and AI. 🌐Business Managment Systems ERP - we implement, adapt, optimize, and maintain flexible, safe, and open ERP of production and distribution companies worldwide. 🤝Talent Network - we provide access to the best specialists. ☁️ Modern Architecture - we build integrated, sustainable, and open CI / CD environments based on containers enabling safe and more frequent delivery of proven changes in the application code. We treat technology as a tool to achieve a goal. Thanks to our consultants' reliability and proactive approach, initial projects usually become long-term cooperation. For over 16 years, it has provided various services to support clients in digital transformation. #LI-Hybrid We offer: We are open to the employment form according to your preferences  Work with experienced and engaged team, willing to learn, share knowledge and open for growth and new ideas  Hybrid (6 days from the office per month) Mindbox is a dynamically growing IT company, but still not a large one – everybody can have a real impact on where we are going next We invest in developing skills and abilities of our employees We have attractive benefits and provide all the tools required for work f.e. computer Interpolska Health Care, Multisport, Warta Insurance, training platform (Sages)  ,[Produce, manage, and update end-to-end solution designs in line with reference architecture & business requirements., Articulate and publish key design decision records and options to ensure all solutions follow a logical, transparent decision-making process., Articulate, publish, and ensure approval of any design deviations resulting in technical debt., Ensure any technical risks or issues arising from a solution design are recorded and mitigated., Produces, manages and translates the requirements into the architecture for that solution, ensuring technology and services meet the customer needs and expected business outcomes., Ensures the design of the solutions are efficient, timely and cost effective throughout the project lifecycle., Clear understanding of both the motivations of the business and technical security., Promote strong documentation and clerkship., Ensures all high-level designs, architecture patterns, decision records, deviation requests, and technical risks or issue records undergo architectural and project governance processes., Ensure all architecture artefacts undergo appropriate peer review prior to design authority presentation., Present publications at technical design authorities for input, feedback, and approval., Effectively manages and escalates both technical and project risks or issues., Articulates solutions and remediation steps to technical risks & issues., Ability to map design decisions to resultant technical risks & issues to articulate the cause and rationale which leads to any negatively impacting change., Provides technical thought leadership in their domain of expertise., Willingness and ability to work across information technology as a cybersecurity SME., Ability to manage a project team of technical architects, engineers, and/or analysts., Ability to take a deputised role in programme management-related tasks where necessary.] Requirements: Cybersecurity, Security, Cryptography, Cloud, HashiCorp Vault, Single sign-on, Kerberos, OAuth, SAML, CISSP, CISM, TOGAF, UML Additionally: Sport subscription, Private healthcare, International projects, Free coffee.