Candidates based in Germany, or with a German work permit, are preferred.
Focus:
perimeter, infrastructure, IIDC Hub services, connections to message broker, IIDC Self Service Portal, manufacturer PKI and customer networks
Must have:
- Network and trust-zone design, segmentation, reverse proxy / TLS termination, OT-IT integration
- Linux and OCI container hardening, container isolation, image provenance, secrets management, backup and disaster recovery
- Container runtime environments (Docker, Docker Compose, Kubernetes)
- API authentication/authorization, service-to-service identity, OWASP-class vulnerabilities, tenant isolation, audit
- MQTT broker authentication/authorization and ACLs, database access control
- Supply chain: dependency management, SBOM, artifact signing, CI/CD and secret security, authenticated offline updates
- Logging, monitoring, incident response, coordinated disclosure
- CRA risk assessment and technical documentation
- Writes and reviews Python/FastAPI backend and integration code, including tests
- Reads embedded C sufficiently to validate interfaces
Nice to have:
IEC 62443, OT deployments, enterprise PKI/provisioning services, BRSKI/MASA, secure boot and firmware signing, penetration-test coordination
#J-18808-Ljbffr
