Senior Security Architect
Pubblicato il 03-10-2026 - Allianz in Italia
About the Job
We are looking for a hands-on Senior Security Architect / Lead Engineer to own security and compliance across our cloud database platform services. You will drive the security strategy for Oracle Databases, Oracle Cloud Infrastructure (OCI), and PostgreSQL environments, ensuring they meet regulatory and internal standards.
As the technical lead of a dedicated security squad, you will balance deep engineering work with people leadership, mentoring engineers and collaborating with architects, operations, and governance stakeholders across the organization.
You will design controls, respond to audit findings and continuously raise the security posture of our data infrastructure, all while helping the team grow and operate with autonomy.
What you do
- Security Architecture Design: Design and implement end-to-end security architectures for Oracle Databases (in OCI) and PostgreSQL deployments, addressing encryption (data-at-rest and data-in-transit), key management, privilege separation, and OS/DB hardening.
- Network Security Controls:
Define and maintain network security controls aligned with Zero Trust Architecture (ZTA) principles, including firewall rule sets, private endpoint configurations, VCN/subnet segmentation in OCI and certificate lifecycle management (PKI, certificate authorities, rotation automation).
- Threat Modeling and Vulnerability Management: Lead threat-modelling sessions for new platform capabilities, translate findings into actionable engineering controls, and establish vulnerability management for the entire database stack.
- Integration with Microsoft Entra ID: Own the technical integration of Microsoft Entra ID with database access patterns, including OAuth 2.0/OIDC flows, managed identities, Conditional Access, and Privileged Identity Management (PIM) for database roles.
- Compliance and Framework Alignment: Maintain and improve alignment with security and compliance frameworks such as CIS Benchmarks, ISO 27001/27017/27018, SO