[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-senior-security-architect-mfd-allianz-insurance-en-ro":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":12,"featured_until":7,"is_active":13,"deactivated_at":7,"is_enriched":13,"processed_job_posting_json":14,"processed_latitude":62,"processed_longitude":64,"processed_employment_types":66,"processed_working_hours":67,"processed_working_hours_labels":69,"processed_home_office":70,"processed_salary_min":71,"processed_salary_max":72,"processed_salary_currency":73,"processed_salary_source":74,"processed_benefits":75,"processed_benefits_labels":87,"processed_industry":88,"processed_skills":7,"processed_job_location":89,"processed_full_address_gmaps":91,"processed_street_gmaps":92,"processed_city_gmaps":93,"processed_postal_code_gmaps":95,"processed_country_gmaps":97,"processed_country_iso_code_gmaps":99,"full_description":17,"formatted_description":101,"processed_employment_types_labels":23,"processed_home_office_labels":21,"processed_industry_labels":25,"processed_it_skills":102,"processed_it_skills_labels":105,"processed_soft_skills":106,"processed_soft_skills_labels":107,"processed_job_expertise_skills":108,"processed_job_expertise_skills_labels":109,"processed_language_requirements":110,"processed_total_experience_years":117,"processed_professional_field":118,"processed_professional_field_labels":120,"processed_leadership_role":13,"processed_date_posted":20,"raw_job_url":121,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":88,"canonical_industry_label":25,"max_cpc":122,"actual_cpc":7},42577,"senior-security-architect-mfd-allianz-insurance","Senior Security Architect (m\u002Ff\u002Fd)",null,{"name":9,"slug":10,"logo_url":11},"Allianz Insurance","allianz-insurance","https:\u002F\u002Fcdn.phenompeople.com\u002FCareerConnectResources\u002FAISAIPGB\u002Fimages\u002FHeader-1706868786965.svg",false,true,{"@context":15,"@type":16,"title":6,"description":17,"hiringOrganization":18,"datePosted":20,"jobLocationType":21,"employmentType":22,"industry":24,"skills":26,"baseSalary":53,"validThrough":61},"https:\u002F\u002Fschema.org\u002F","JobPosting","\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #00b0f0;\">About the Job\u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">We are looking for a hands-on Senior Security Architect \u002F Lead Engineer to own security and compliance across our cloud database platform services. You will drive the security strategy for Oracle Databases, Oracle Cloud Infrastructure (OCI), and PostgreSQL environments, ensuring they meet regulatory and internal standards. \u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">As the technical lead of a dedicated security squad, you will balance deep engineering work with people leadership, mentoring engineers and collaborating with architects, operations, and governance stakeholders across the organization.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\"> \u003C\u002Fp>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">You will design controls, respond to audit findings and continuously raise the security posture of our data infrastructure, all while helping the team grow and operate with autonomy.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\"> \u003C\u002Fp>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #00b0f0;\">What you do\u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Security Architecture Design:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Design and implement end-to-end security architectures for Oracle Databases (in OCI) and PostgreSQL deployments, addressing encryption (data-at-rest and data-in-transit), key management, privilege separation, and OS\u002FDB hardening.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Network Security Controls:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Define and maintain network security controls aligned with Zero Trust Architecture (ZTA) principles, including firewall rule sets, private endpoint configurations, VCN\u002Fsubnet segmentation in OCI and certificate lifecycle management (PKI, certificate authorities, rotation automation).\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Threat Modeling and Vulnerability Management:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Lead threat-modelling sessions for new platform capabilities, translate findings into actionable engineering controls, and establish vulnerability management for the entire database stack.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Integration with Microsoft Entra ID:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Own the technical integration of Microsoft Entra ID with database access patterns, including OAuth 2.0\u002FOIDC flows, managed identities, Conditional Access, and Privileged Identity Management (PIM) for database roles.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Compliance and Framework Alignment:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Maintain and improve alignment with security and compliance frameworks such as CIS Benchmarks, ISO 27001\u002F27017\u002F27018, SOC 2 Type II, GDPR\u002FDSGVO, and DORA, while acting as the primary contact for database-security-related audit requests and remediation plans.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Documentation and Leadership:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Develop and maintain security control documentation, runbooks, and policy artifacts for the database platform, while leading a cross-functional squad responsible for database security and compliance, fostering a culture of ownership and continuous learning.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Incident Management and Reporting:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Serve as an escalation point and technical decision-maker for database security incidents, manage squad capacity and sprint objectives and report regularly on risk postures and compliance status.\u003C\u002Fspan>\u003C\u002Fli>\u003C\u002Ful>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\"> \u003C\u002Fp>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #00b0f0;\">What you bring\u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Oracle Database Security Expertise:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> In-depth, hands-on experience securing Oracle Database (19c\u002F26ai), including Oracle Advanced Security (TDE, Oracle Label Security, Database Vault), Oracle Audit Vault, and fine-grained access controls.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">PostgreSQL and OCI Security:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Strong PostgreSQL expertise (row-level security, pg_hba.conf hardening, pgaudit, SSL\u002FTLS configuration, and external authentication integration) and solid understanding of OCI control-plane security (IAM policies, compartments, OCI Vault, DB System security settings, and Security Zones).\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Network and Certificate Management:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Proven experience designing network security for cloud database environments (private endpoints, VPN\u002FFastConnect\u002FExpressRoute, NSG policies) and hands-on certificate lifecycle management, including PKI design, CA hierarchies, and mTLS configuration.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Secrets and Identity Management:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Familiarity with secrets management tools (HashiCorp Vault, OCI Vault, Azure Key Vault) and deep practical knowledge of Microsoft Entra ID (application registrations, managed identities, RBAC, Conditional Access, PIM, and audit logs), including wiring Entra ID as an identity provider for Oracle and PostgreSQL authentication.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Compliance and Regulatory Alignment:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Demonstrated track record of designing or operating controls aligned to frameworks such as ISO 27001, SOC 2, GDPR, CIS Benchmarks, or DORA, with the ability to translate regulatory requirements into actionable engineering controls.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Leadership and Collaboration:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Experience leading or tech-leading a team\u002Fsquad in an agile or DevOps environment, with strong communication skills to write precise technical specifications, present security concepts to executives and negotiate constructively with engineering peers.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Risk Communication:\u003C\u002Fspan>\u003C\u002Fstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> Ability to clearly communicate risk trade-offs and technical complexities to non-technical stakeholders, ensuring alignment and understanding across diverse audiences.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Basic knowledge in AI technologies, principles and their practical use.\u003C\u002Fspan>\u003C\u002Fli>\u003C\u002Ful>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\"> \u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #00b0f0;\">What we offer\u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli style=\"text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #3b3838;\">Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.\u003C\u002Fspan>\u003C\u002Fli>\u003C\u002Ful> \u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #00b0f0;\"> \u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #00b0f0;\">About Allianz Technology \u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\"> \u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction. \u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\"> \u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz. \u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">Find us at: \u003C\u002Fspan>\u003Ca href=\"http:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Fallianz-technology\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">www.linkedin.com\u002Fcompany\u002Fallianz-technology\u003C\u002Fspan>\u003C\u002Fa>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">. \u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\"> \u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #00b0f0;\">Commitment to Integrity, Fairness & Inclusion \u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. \u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\"> \u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; font-size: 12pt; font-family: 'Times New Roman', serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; font-size: 12pt; font-family: 'Times New Roman', serif;\"> \u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; font-size: 12pt; font-family: 'Times New Roman', serif;\">\u003Cstrong>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #00b0f0;\">To Recruitment Agencies\u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp style=\"margin: 0in 0in 6pt; text-align: justify; font-size: 12pt; font-family: 'Times New Roman', serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.\u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; font-size: 12pt; font-family: 'Times New Roman', serif;\">\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.\u003Ca name=\"_Hlk205454433\">\u003C\u002Fa>\u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; font-size: 12pt; font-family: 'Times New Roman', serif;\"> \u003C\u002Fp>\u003Cp style=\"margin: 0in; text-align: justify; line-height: normal; font-size: 11pt; font-family: Calibri, sans-serif;\">\u003Ca name=\"_Hlk205539231\">\u003C\u002Fa>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040; display: none;\"> \u003C\u002Fspan>\u003Cspan style=\"font-size: 10.0pt; font-family: 'Allianz Neo', sans-serif; color: #404040;\">99409 | IT & Tech Engineering | Professional | Non-Executive | Allianz Technology | Full-Time | Permanent\u003C\u002Fspan>\u003C\u002Fp>",{"@type":19,"name":9},"Organization","2026-06-17","HYBRID",[23],"PERMANENT",[25],"Insurance",[27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52],"Oracle Database Security","PostgreSQL Security","Oracle Cloud Infrastructure (OCI) Security","Microsoft Entra ID","HashiCorp Vault","Azure Key Vault","PKI","OAuth 2.0\u002FOIDC","Zero Trust Architecture","CIS Benchmarks","ISO 27001","SOC 2","GDPR","DORA","Leadership","Communication","Mentoring","Collaboration","Risk Communication","Agile\u002FDevOps","Security Architecture Design","Threat Modeling","Vulnerability Management","Compliance Framework Alignment","Incident Management","Documentation",{"@type":54,"currency":55,"value":56},"MonetaryAmount","EUR",{"@type":57,"minValue":58,"maxValue":59,"unitText":60},"QuantitativeValue",90000,130000,"YEAR","2027-06-17",[63],44.43225,[65],26.10626,"permanent",[68],"FULL_TIME",[68],"hybrid",15000,25000,"RON","estimated",[76,77,78,79,80,81,82,83,84,85,86],"Hybrid work model","Up to 25 days per year working from abroad","Company bonus scheme","Pension","Employee shares program","Multiple employee discounts","Career development and digital learning programs","International career mobility","Flexible working","Health and wellbeing offers","Healthcare and parental leave benefits",[76,77,78,79,80,81,82,83,84,85,86],"insurance",[90],"allianz, rou: 020339, bucharest, romania",[],[],[94],"București",[96],"ROU: 020339",[98],"Romania",[100],"RO","## About the Job\n\nWe are looking for a hands-on Senior Security Architect \u002F Lead Engineer to own security and compliance across our cloud database platform services. You will drive the security strategy for Oracle Databases, Oracle Cloud Infrastructure (OCI), and PostgreSQL environments, ensuring they meet regulatory and internal standards.\n\nAs the technical lead of a dedicated security squad, you will balance deep engineering work with people leadership, mentoring engineers and collaborating with architects, operations, and governance stakeholders across the organization.\n\nYou will design controls, respond to audit findings and continuously raise the security posture of our data infrastructure, all while helping the team grow and operate with autonomy.\n\n## What you do\n\n- **Security Architecture Design:** Design and implement end-to-end security architectures for Oracle Databases (in OCI) and PostgreSQL deployments, addressing encryption (data-at-rest and data-in-transit), key management, privilege separation, and OS\u002FDB hardening.\n- **Network Security Controls:** Define and maintain network security controls aligned with Zero Trust Architecture (ZTA) principles, including firewall rule sets, private endpoint configurations, VCN\u002Fsubnet segmentation in OCI and certificate lifecycle management (PKI, certificate authorities, rotation automation).\n- **Threat Modeling and Vulnerability Management:** Lead threat-modelling sessions for new platform capabilities, translate findings into actionable engineering controls, and establish vulnerability management for the entire database stack.\n- **Integration with Microsoft Entra ID:** Own the technical integration of Microsoft Entra ID with database access patterns, including OAuth 2.0\u002FOIDC flows, managed identities, Conditional Access, and Privileged Identity Management (PIM) for database roles.\n- **Compliance and Framework Alignment:** Maintain and improve alignment with security and compliance frameworks such as CIS Benchmarks, ISO 27001\u002F27017\u002F27018, SOC 2 Type II, GDPR\u002FDSGVO, and DORA, while acting as the primary contact for database-security-related audit requests and remediation plans.\n- **Documentation and Leadership:** Develop and maintain security control documentation, runbooks, and policy artifacts for the database platform, while leading a cross-functional squad responsible for database security and compliance, fostering a culture of ownership and continuous learning.\n- **Incident Management and Reporting:** Serve as an escalation point and technical decision-maker for database security incidents, manage squad capacity and sprint objectives and report regularly on risk postures and compliance status.\n\n## What you bring\n\n- **Oracle Database Security Expertise:** In-depth, hands-on experience securing Oracle Database (19c\u002F26ai), including Oracle Advanced Security (TDE, Oracle Label Security, Database Vault), Oracle Audit Vault, and fine-grained access controls.\n- **PostgreSQL and OCI Security:** Strong PostgreSQL expertise (row-level security, pg_hba.conf hardening, pgaudit, SSL\u002FTLS configuration, and external authentication integration) and solid understanding of OCI control-plane security (IAM policies, compartments, OCI Vault, DB System security settings, and Security Zones).\n- **Network and Certificate Management:** Proven experience designing network security for cloud database environments (private endpoints, VPN\u002FFastConnect\u002FExpressRoute, NSG policies) and hands-on certificate lifecycle management, including PKI design, CA hierarchies, and mTLS configuration.\n- **Secrets and Identity Management:** Familiarity with secrets management tools (HashiCorp Vault, OCI Vault, Azure Key Vault) and deep practical knowledge of Microsoft Entra ID (application registrations, managed identities, RBAC, Conditional Access, PIM, and audit logs), including wiring Entra ID as an identity provider for Oracle and PostgreSQL authentication.\n- **Compliance and Regulatory Alignment:** Demonstrated track record of designing or operating controls aligned to frameworks such as ISO 27001, SOC 2, GDPR, CIS Benchmarks, or DORA, with the ability to translate regulatory requirements into actionable engineering controls.\n- **Leadership and Collaboration:** Experience leading or tech-leading a team\u002Fsquad in an agile or DevOps environment, with strong communication skills to write precise technical specifications, present security concepts to executives and negotiate constructively with engineering peers.\n- **Risk Communication:** Ability to clearly communicate risk trade-offs and technical complexities to non-technical stakeholders, ensuring alignment and understanding across diverse audiences.\n- Basic knowledge in AI technologies, principles and their practical use.\n\n## What we offer\n\n- We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.\n- We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).\n- From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.\n- Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.\n\n## About Allianz Technology\n\nWith its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience.\n\nWe service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction.\n\nIn short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.\n\nFind us at: www.linkedin.com\u002Fcompany\u002Fallianz-technology.\n\n## Commitment to Integrity, Fairness & Inclusion\n\nAllianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.\n\nWe at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations.\n\n## To Recruitment Agencies\n\nAllianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.\n\nWhen we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.\n\n99409 | IT & Tech Engineering | Professional | Non-Executive | Allianz Technology | Full-Time | Permanent",{"pki":103,"dora":103,"gdpr":103,"soc 2":103,"iso 27001":103,"cis benchmarks":103,"oauth 2.0\u002Foidc":103,"azure key vault":104,"hashicorp vault":104,"microsoft entra id":103,"postgresql security":103,"zero trust architecture":103,"oracle database security":103,"oracle cloud infrastructure (oci) security":103},4,3,[27,28,29,30,31,32,33,34,35,36,37,38,39,40],{"leadership":103,"communication":103,"mentoring":103,"collaboration":103,"risk communication":103,"agile\u002Fdevops":104},[41,42,43,44,45,46],{"documentation":103,"threat modeling":103,"incident management":103,"vulnerability management":103,"security architecture design":103,"compliance framework alignment":103},[47,48,49,50,51,52],{"detected_language_jobad":111,"required":112},"en",[113],[114],{"language":115,"level":116},"ENGLISH","C2",8,[119],"Information and Communications Technology Professionals",[119],"https:\u002F\u002Fcareers.allianz.com\u002Fglobal\u002Fen\u002Fjob\u002F99409\u002Fsenior-security-architect-m-f-d",1]