Security Transformation Architect

About the RoleWe are looking for an experienced Security Transformation Architect to support our client from the financial sector in Wrocław on strategic transformation initiatives. The primary focus of this role will be leading the migration and replacement of legacy security solutions with modern platforms across Security Operations, Identity & Access Management (IAM), Network Security, and Cloud Security domains.

If you enjoy designing target architectures, leading complex transformation programs, and collaborating with diverse stakeholders, this role offers an exciting challenge and the opportunity to drive large-scale security modernization initiatives.

Key Responsibilities

Design and deliver transformation programs for legacy security platforms and services.

Define target-state security architectures, select appropriate technologies, and evaluate vendors.

Lead migration and transformation projects from initial assessment and planning through implementation and handover to operations.

Manage project timelines, budgets, risks, and stakeholder communications.

Collaborate closely with Security, SOC, Operations, Enterprise Architecture teams, and external vendors.

Ensure that implemented solutions comply with regulatory and security requirements applicable to the financial sector.

Provide architectural guidance and strategic recommendations for enterprise security transformation initiatives.

Support governance, documentation, and decision-making processes throughout the project lifecycle.

Requirements

Minimum 5 years of experience working as a Security Architect.

Proven experience in migration, consolidation, or modernization of legacy security platforms.

Strong hands-on knowledge of at least one of the following platforms:

Palo Alto Cortex

• Microsoft Sentinel
• Crowd
• Strike
• Splunk Enterprise Security (ES)

Extensive experience in network security architecture, including:

Zero TrustNext-Generation Firewalls (NGFW)SASESD-WAN

Experience in Identity and Access Management (IAM), including:

Active Directory

Microsoft Entra ID

Privileged Access Management (PAM)

Multi-Factor Authentication (MFA)

Strong understanding of Azure or AWS from a security architecture perspective.

Proven experience leading complex security transformation projects.

Knowledge of financial sector regulations and frameworks, including:

DORABAIT

MaRisk

German language proficiency at C1+ level and English proficiency at minimum B2 level.

Security architecture certifications such as:

CISSPSABSATOGAF Security

Project management certifications such as:

PMPPRINCE2IPMANice to Have

Experience with SOAR platforms, including:

Cortex XSOAR

• Microsoft Sentinel SOAR
• Swimlane
• Knowledge of Kubernetes, Docker, and container security.

Experience in Detection Engineering, MITRE ATT& CK framework, and Vulnerability Management solutions.

Previous experience working within the financial sector or other highly regulated environments.

Additional certifications such as:

CISMPCNSEAZ-500SC-200ITIL 4 Foundation

• What You'll Work OnLarge-scale security transformation programs
• Legacy platform modernization initiatives
• Security Operations and SIEM transformationIAM and Privileged Access transformation
• Network and Cloud Security architecture modernization
• Regulatory compliance and security governance initiatives within the financial sector