Zero Trust Architect

We are looking for a Zero Trust Architect to join our team at our offices in Terrassa (Barcelona). 

This role is part of the Security Architecture team within the CISO Office and is accountable for the group‑wide design, implementation, and continuous evolution of Syntegon’s Zero Trust architecture. The position ensures that all access across the organization is continuously verified, risk‑based, and compliant with internal and external requirements.

Your responsibilities include:

• End‑to‑end ownership of the definition, advancement, and governance of the enterprise‑wide Zero Trust architecture, including target state, roadmap, standards, and reference architectures
• Translating Zero Trust principles (e.g. continuous verification, least privilege) into concrete architectural and design requirements for identities, devices, networks, applications, and data
• Architectural responsibility for identity and access models (IAM), network segmentation, cloud and endpoint security, and secure access technologies such as ZTNA (Zero Trust Network Access) and SASE (Secure Access Service Edge)
• Functional leadership and orchestration of company‑wide Zero Trust initiatives and implementations, working closely with Security, IT, Cloud, Operations, and Compliance teams, providing technical guidance without disciplinary responsibility
• Driving and leading Zero Trust maturity assessments, defining target states, and evaluating existing and new systems and architectures from a Zero Trust perspective
• Ensuring, from an architectural standpoint, compliance with regulatory and normative requirements (e.g. ISO 27001, NIST, GDPR) within the Zero Trust framework.

• A completed university degree in Computer Science, IT Security, Information Systems, or a comparable field; alternatively, an equivalent qualification supported by extensive relevant professional experience.
• Several years of experience in a senior Security or Cloud Architecture role, with responsibility for complex, enterprise‑wide architectures.
• Proven, in‑depth expertise in Zero Trust concepts and frameworks (e.g. NIST 800‑207) as well as in identity, authentication, and authorization mechanisms.
• Strong knowledge of modern platforms and technologies, such as Microsoft Entra ID (Azure AD), public cloud platforms, and endpoint and network security solutions.
• The ability to communicate complex technical topics clearly and appropriately to both technical and non‑technical stakeholders.

Additional Information

• Availability to travel (approximately 20%) when required (HQ in Germany/Switzerland).

• Valid driving license and own vehicle.

Por Syntegon y sus subsidiarias, la diversidad es una preocupación clave. Exclusivamente promovemos un ambiente donde todos los empleados, independientemente de su género, edad, origen, religión, orientación sexual, identidad de género o necesidades especiales, sean tratados de manera equitativa. Si esta oferta de trabajo utiliza únicamente la forma masculina, es por razones de legibilidad y se refiere a individuos de todos los géneros.