Security Solution Architect (m/w)

The position of Security Solution Architect (m/w) is open at Ärztekasse Genossenschaft, a firm that creates software tools for doctors, billing processes and digital health services. The role sits within a dispersed delivery network that runs both on‑premise data centres and cloud platforms, supporting Debian and Windows environments. In this capacity you will shape the security blueprint for applications, infrastructure and networking layers. Tasks include turning business needs into secure designs, applying concepts such as Zero Trust and Defense‑in‑Depth, and weaving together technologies like SASE, identity management, web‑application firewalls and authentication mechanisms. You will evaluate current and future architectures to spot vulnerabilities, produce clear diagrams and decision records, and guide both internal teams and external partners toward safe integration and operation of services. The ideal candidate brings several years of experience as a security architect and a solid background in designing across infrastructure, software and network domains. Proven expertise with SASE, Zero Trust, secure remote access and broader network‑security principles is essential. You must be comfortable with web‑application firewalls, reverse proxies, API protection and overall web‑app security. Deep knowledge of identity and access management, including providers, SSO, OAuth2, OpenID Connect, SAML and role‑ or policy‑based controls, is required, as is the ability to analyse complex technical landscapes and document architectural decisions. Strong communication skills and fluency in English are mandatory. The role offers a flexible workload ranging from 80 % to full time, based in Urdorf, with immediate start possible. The environment is characterised by flat hierarchies, proactive colleagues and close collaboration with partner organisations, allowing you to influence the future of eHealth directly. German language skills, certifications such as NIST, CISSP, CISM or familiarity with CIS Controls, and experience with Spring Boot or .Net are regarded as valuable additions. What the role asks for: - Several years experience as Security Architect - Strong architecture background across infra, apps, networks - Hands‑on experience with SASE solutions - Proven work with Zero Trust principles - Secure remote‑access and network‑security expertise - Knowledge of WAF and reverse proxy technologies - API protection and web‑application security skills - Deep IAM knowledge (IdP, SSO, OAuth2, OIDC, SAML) - Excellent analytical abilities for complex environments - Documented experience creating architecture artefacts - Ability to convert business and security needs into solutions - Effective communication with technical and non‑technical audiences - Fluent English proficiency - German language proficiency (advantage) - NIST, CISSP, CISM or CIS Controls knowledge (advantage) - Experience with Spring Boot (advantage) - Experience with .Net (advantage)