Allianz

1 month ago

Senior Security Architect (m/f/d) (Bucharest, Bucuresti, RO, ROU: 02033)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Hands-on senior security architect leading a dedicated security squad to design end-to-end security architectures for Oracle Databases (OCI) and PostgreSQL deployments, drive security strategy and governance, mentor engineers, and coordinate with architects, operations, and governance teams to raise security posture across the data infrastructure.

Location: Bucharest

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Security Architecture Design: Design and implement end-to-end security architectures for Oracle Databases (in OCI) and PostgreSQL deployments, addressing encryption (data-at-rest and data-in-transit), key management, privilege separation, and OS/DB hardening.
•Network Security Controls: Define and maintain network security controls aligned with Zero Trust Architecture (ZTA) principles, including firewall rule sets, private endpoint configurations, VCN/subnet segmentation in OCI and certificate lifecycle management (PKI, certificate authorities, rotation automation).
•Threat Modeling and Vulnerability Management: Lead threat-modelling sessions for new platform capabilities, translate findings into actionable engineering controls, and establish vulnerability management for the entire database stack.
•Integration with Microsoft Entra ID: Own the technical integration of Microsoft Entra ID with database access patterns, including OAuth 2.0/OIDC flows, managed identities, Conditional Access, and Privileged Identity Management (PIM) for database roles.
•Compliance and Framework Alignment: Maintain and improve alignment with security and compliance frameworks such as CIS Benchmarks, ISO 27001/27017/27018, SOC 2 Type II, GDPR/DSGVO, and DORA, while acting as the primary contact for database-security-related audit requests and remediation plans.

Pay and Benefits

Perks:Annual BonusPensionEquityHealth InsuranceLearning

Key Requirements

•Oracle Database security expertise with hands-on experience (19c/26ai) including TDE, Oracle Label Security, Database Vault, Audit Vault and fine-grained access controls
•PostgreSQL and OCI security expertise including row-level security, pg_hba.conf hardening, pgaudit, SSL/TLS configuration and external authentication
•Network security controls aligned with Zero Trust Architecture, including private endpoints, VCN/subnet segmentation, and PKI certificate lifecycle management
•Secrets and identity management including HashiCorp Vault, OCI Vault, Azure Key Vault and Microsoft Entra ID integration (RBAC, Conditional Access, PIM, and audit logs)
•Compliance and regulatory alignment with ISO27001/SOC 2/GDPR/CIS/DORA; ability to translate requirements into engineering controls and lead audit remediation

Experience:Insurance

Skills:LeadershipProblem-solvingCommunication

Tech Stack:OracleOracle Database SecurityOracle Cloud InfrastructureOCIPostgreSQLPg_hba.confPGAuditSSL/TLSOAuth 2.0OIDCMicrosoft Entra IDPKIVaultHashiCorp VaultOCI VaultEncryptionTLSZero TrustRA

Company Brief

Allianz

Global insurance and financial services group offering property-casualty insurance, life and health insurance, asset management, and corporate risk solutions to individuals, businesses, and institutions across more than 70 countries.

Industry: Insurance

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Munich, Germany

Founded: 1890

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Allianz

1 month ago

Senior Security Architect (m/f/d) (Bucharest, Bucuresti, RO, ROU: 02033)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Location: Bucharest

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Security Architecture Design: Design and implement end-to-end security architectures for Oracle Databases (in OCI) and PostgreSQL deployments, addressing encryption (data-at-rest and data-in-transit), key management, privilege separation, and OS/DB hardening.
•Network Security Controls: Define and maintain network security controls aligned with Zero Trust Architecture (ZTA) principles, including firewall rule sets, private endpoint configurations, VCN/subnet segmentation in OCI and certificate lifecycle management (PKI, certificate authorities, rotation automation).
•Threat Modeling and Vulnerability Management: Lead threat-modelling sessions for new platform capabilities, translate findings into actionable engineering controls, and establish vulnerability management for the entire database stack.
•Integration with Microsoft Entra ID: Own the technical integration of Microsoft Entra ID with database access patterns, including OAuth 2.0/OIDC flows, managed identities, Conditional Access, and Privileged Identity Management (PIM) for database roles.
•Compliance and Framework Alignment: Maintain and improve alignment with security and compliance frameworks such as CIS Benchmarks, ISO 27001/27017/27018, SOC 2 Type II, GDPR/DSGVO, and DORA, while acting as the primary contact for database-security-related audit requests and remediation plans.

Pay and Benefits

Perks:Annual BonusPensionEquityHealth InsuranceLearning

Key Requirements

•Oracle Database security expertise with hands-on experience (19c/26ai) including TDE, Oracle Label Security, Database Vault, Audit Vault and fine-grained access controls
•PostgreSQL and OCI security expertise including row-level security, pg_hba.conf hardening, pgaudit, SSL/TLS configuration and external authentication
•Network security controls aligned with Zero Trust Architecture, including private endpoints, VCN/subnet segmentation, and PKI certificate lifecycle management
•Secrets and identity management including HashiCorp Vault, OCI Vault, Azure Key Vault and Microsoft Entra ID integration (RBAC, Conditional Access, PIM, and audit logs)
•Compliance and regulatory alignment with ISO27001/SOC 2/GDPR/CIS/DORA; ability to translate requirements into engineering controls and lead audit remediation

Experience:Insurance

Skills:LeadershipProblem-solvingCommunication

Tech Stack:OracleOracle Database SecurityOracle Cloud InfrastructureOCIPostgreSQLPg_hba.confPGAuditSSL/TLSOAuth 2.0OIDCMicrosoft Entra IDPKIVaultHashiCorp VaultOCI VaultEncryptionTLSZero TrustRA

Company Brief

Allianz

Industry: Insurance

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Munich, Germany

Founded: 1890

Website LinkedIn