Infrastructure Domain Architecture – Security (PID0644)

This is a remote position.

Infrastructure Domain Architecture Security (PID0644) Infrastructure / Security Contract / Freelance

• Contract / Freelance
  
• Full-time
  
• Remote with travel readiness required (Germany)
  
• Start: 01.07.2026
  

About the role

We are seeking a Junior Infrastructure Security Engineer to join the Infrastructure Security sub-group of a large internal platform programme in the energy sector. You will advise on and deliver security infrastructure in line with architectural and operational requirements with a focus on datacenter security firewall management DNS hardening and security delivery automation.

What youll be doing

• Developing detailed security deployment plans covering implementation phases resources and timelines
  
• Installing and configuring security solutions in line with defined security standards and best practices
  
• Maintaining thorough documentation of the security environment including configurations protocols and decision justifications
  
• Continuously validating implementation processes for effectiveness and alignment with organisational goals
  
• Identifying discrepancies or inefficiencies in processes and proposing corrective actions
  

What youll need

• Good experience with datacentre security VLAN VPN and remote access solutions
  
• Good hands-on experience with firewalls for ACLs VPNs and IPS/IDS
  
• Experience in vulnerability management security patching and CIS hardening of firewall and DNS devices
  
• Good experience with Infoblox Grid solutions DNS RFC standards DNS internet-facing hardening and security
  
• Experience developing and supporting new security and access products alongside architecture teams
  
• Security delivery automation with Ansible with ability to align with software development teams using Python
  
• Fluent English (C1 minimum)
  

Desirable

• Experience with Jira Confluence and Miro or similar tools
  
• Linux knowledge (basic)
  
• VMware (basic) LDAP OIDC OAuth PKI certificates