22.08.2025 aktualisiert
OV
nicht verfügbar
info: nicht verfügbar bis 01.01.2027
Senior Cybersecurity Architect - | Zero Trust | M365 | PKI | Identity
Oberreichenbach, Deutschland
Nur Remote
Master’s degree - Applied InformaticsSkills
Active DirectoryAmazon Web ServicesApplication IntegrationAuthenticationsMicrosoft AzureCloud ComputingCloud-EngineeringKommunikationssicherheitInformationssicherheitDynamic Host Configuration ProtocolDNSITILIdentitätsmanagementInfrastrukturIt Service Management
Zero Trust Architecture:
Expert in designing and implementing Zero Trust frameworks, ensuring robust security measures and minimizing attack surfaces.
Identity and Access Management: Proficient in managing hybrid identities, enterprise application integration, and advanced authentication methods.
Cloud Architecture:
Skilled in architecting and deploying secure cloud solutions on Azure and AWS platforms.
Office365 Design & Administration: Experienced in designing and administering Office365 environments, enhancing productivity and collaboration.
Authentication & Authorization: Specialized in implementing secure authentication and authorization mechanisms, including SAML, OAuth, and OIDC.
Federation Services:
Adept at configuring and managing federation services to enable seamless single sign-on experiences.
Certification Authorities-PKI: Knowledgeable in managing public key infrastructure and certification authorities to ensure secure communications.
Infrastructure Services Knowledge: Comprehensive understanding of infrastructure services, including DHCP, DNS, and Active Directory.
Project Management:
Proven ability to lead and manage complex projects, delivering high-quality solutions in dynamic environments.
Intune Management:
Experienced in managing and securing devices using Microsoft Endpoint Manager (Intune).
ITIL:
Certified in ITIL, ensuring best practices in IT service management.
Azure Active Directory:
Proficient in managing Azure Active Directory, including conditional access authentication methods, application integration and identity protection.
Security Tiering Knowledge:
Expertise in implementing security tiering strategies to enhance organizational security posture.
Expert in designing and implementing Zero Trust frameworks, ensuring robust security measures and minimizing attack surfaces.
Identity and Access Management: Proficient in managing hybrid identities, enterprise application integration, and advanced authentication methods.
Cloud Architecture:
Skilled in architecting and deploying secure cloud solutions on Azure and AWS platforms.
Office365 Design & Administration: Experienced in designing and administering Office365 environments, enhancing productivity and collaboration.
Authentication & Authorization: Specialized in implementing secure authentication and authorization mechanisms, including SAML, OAuth, and OIDC.
Federation Services:
Adept at configuring and managing federation services to enable seamless single sign-on experiences.
Certification Authorities-PKI: Knowledgeable in managing public key infrastructure and certification authorities to ensure secure communications.
Infrastructure Services Knowledge: Comprehensive understanding of infrastructure services, including DHCP, DNS, and Active Directory.
Project Management:
Proven ability to lead and manage complex projects, delivering high-quality solutions in dynamic environments.
Intune Management:
Experienced in managing and securing devices using Microsoft Endpoint Manager (Intune).
ITIL:
Certified in ITIL, ensuring best practices in IT service management.
Azure Active Directory:
Proficient in managing Azure Active Directory, including conditional access authentication methods, application integration and identity protection.
Security Tiering Knowledge:
Expertise in implementing security tiering strategies to enhance organizational security posture.
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2021
Sprachen
DeutschgutEnglischgutRumänischgut
Projekthistorie
- Zero-Trust Program.
- As Techincal Authority, led the adoption of Zero Trust by designing and implementing a comprehensive Zero Trust Architecture (ZTA) framework.
- Drove the progression from traditional Zero Trust maturity to Advanced levels, achieving even Optimal maturity in key areas such as Identity and Device security.
- Provided expert guidance and mentorship to program stakeholders on Zero Trust best practices and emerging trends.
- IGA Evolution Strategy.
- Evaluated the existing Identity Governance and Administration (IGA) tools and processes, considering factors such as costs and capabilities and strategic alignment, and successfully planned the transition to a more effective IGA toolset.
- External Collaboration Strategy
- Developed a comprehensive external collaboration strategy for adidas, ensuring secure interactions with external partners by strictly adhering to Zero Trust principles.
Role
- Global architect for all Identity and Access Management Platforms: Hybrid identities (cloud and on-premise Identities), Enterprise Application Integration, Authentication Methods, Conditional Access.
- The business solution architect for any direct business request.
- Defines standards, roadmaps, strategies, missions and visions for the Identity and Access Management on premise as well as in the cloud with a big focus on security.
- Migrate federated applications from ADFS to Azure AD for over 400 Applications.
- Migrate to PHS from federated authentication.
- MFA and SSPR rollout.
- Secure application access with Azure AD Conditional Access.
- Support the Intune rollout project.
- Configure Windows Hello for Business – key trust.
- Rollout passwordless authentication methods like Windows Hello for Businesss, Phone Signin and Fido2
- Document supported authentication flows OAuth, OIDC and SAML
Role
* Global engineer for all Identity and Access Management Services: Hybrid identities (Microsoft
cloud/azure Active Directory and on-premise Active Directory), DHCP, DNS, Active Directory
Federation Service, Group Policies, Private Key Infrastructure)
* Globally responsible for the above services.
* The overall IT Champion for all these services.
Key Responsibilities
* Ensure all Identity and Authentication Services and windows network services are stable,
reliable and innovative in all sites of the adidas Group.
* Defines standards (software, hardware, support and administration) for the above services
globally.
* Responsible that the Identity and Windows network Service Level objectives are achieved.
* Administration of all the above services.
Bigger Projects
* Support the O365 global rollout with securing access to it from managed devices only with
Azure AD Conditional Access.
* Migrate ADFS 2.0 to ADFS3.0 - refresh hundreds of SSO setups.
* Migrate application publishing from Microsoft Treat Management Gateway (TMG) to Big-IP F5 APM.
* Implemented Azure AD Password Protection
* Global engineer for all Identity and Access Management Services: Hybrid identities (Microsoft
cloud/azure Active Directory and on-premise Active Directory), DHCP, DNS, Active Directory
Federation Service, Group Policies, Private Key Infrastructure)
* Globally responsible for the above services.
* The overall IT Champion for all these services.
Key Responsibilities
* Ensure all Identity and Authentication Services and windows network services are stable,
reliable and innovative in all sites of the adidas Group.
* Defines standards (software, hardware, support and administration) for the above services
globally.
* Responsible that the Identity and Windows network Service Level objectives are achieved.
* Administration of all the above services.
Bigger Projects
* Support the O365 global rollout with securing access to it from managed devices only with
Azure AD Conditional Access.
* Migrate ADFS 2.0 to ADFS3.0 - refresh hundreds of SSO setups.
* Migrate application publishing from Microsoft Treat Management Gateway (TMG) to Big-IP F5 APM.
* Implemented Azure AD Password Protection