Cys_Security Architect_Gcsc

Questa posizione è in Leonardo

Il processo di selezione sarà interamente gestito Leonardo.

Questa opportunità è disponibile in Nerviano - Italy, Chieti Scalo - Italy, Genova Fiumara - Italy, Roma Laurentina - Italy.

Job Description

Leonardo is an international industrial group, among the world’s leading players in Aerospace, Defense, and Security, which creates multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security, and Space. With over 60,000 employees worldwide, the company has a strong industrial presence in Italy, the United Kingdom, Poland, the United States, and operates in 150 countries also through subsidiaries, joint ventures, and shareholdings. A protagonist in major global strategic programs, it is a technological and industrial partner for Governments, Defense Administrations, Institutions, and businesses. Within the Cyber & Security Solutions Business Area, we are looking for a Security Architect for our Milan Nerviano office with the possibility of employment also in Rome Laurentina, Genoa Fiumara, and Chieti Scalo. The person will be responsible for the following activities:

Responsibilities

• Implementation and configuration, integration, customization of PAM solutions (e.g., CyberArk, SSH PrivX, BeyondTrust, Delinea/Thycotic, HashiCorp Vault) at enterprise clients, cryptographic key and secrets management.
• Supporting clients in implementing privileged access policies in line with frameworks such as ISO 27001, NIST, DORA, NIS2.
• Defining IAM architectures (Identity Governance, RBAC, ABAC, Zero Trust) integrated with the client's corporate systems.
• Configuring and integrating connectors to Active Directory, LDAP, Azure AD / Entra ID, SAP, cloud and on-premise applications.
• Managing the complete delivery cycle: implementation, testing, go-live, and handover.
• Producing technical documentation (HLD, LLD, runbook, operational procedures).
• Participating in risk assessment and audit sessions related to identities and access.
• Interfacing with client technical and managerial contacts throughout all project phases.
• Collaborating with other security engineers from other teams (SOC, vulnerability management, network security).
• Supporting pre‑sales activities in effort estimation and drafting technical proposals.
• Ensuring knowledge transfer to internal teams at project end.

Education and Seniority

Master's Degree in Computer Science/Computer Engineering/Telecommunications Engineering or STEM (alternative paths with proven experience are also considered).

Senior: at least 5 years of experience required.

Technical Knowledge and Skills

Essential Requirements

• Proven experience in designing and implementing PAM/IAM solutions in Enterprise contexts.
• In-depth knowledge of at least one of the main PAM platforms: CyberArk (EPV, PSM, PVWA, AIM), BeyondTrust Password Safe, Delinea Secret Server / Privilege Manager.
• Solid knowledge of Active Directory, Azure AD / Microsoft Entra ID, Kerberos, LDAP.
• Familiarity with authentication and federation protocols: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM.
• Ability to work autonomously on complex projects with defined deadlines.

Preferential Requirements

• Knowledge of the SSH PrivX PAM platform.
• PAM/IAM vendor certifications (e.g., CyberArk Defender/Sentry, BeyondTrust Certified Administrator).
• Industry certifications: CISSP, CISM, CompTIA Security+.
• Experience with IGA (Identity Governance & Administration) solutions: SailPoint IdentityNow/IIQ, Saviynt, One Identity.
• Knowledge of cloud environments (AWS IAM, Azure RBAC, GCP IAM) and container security (Kubernetes RBAC).
• Experience in consulting or system integration contexts with managing multiple clients in parallel.
• Knowledge of scripting/automation: PowerShell, Python, REST API.
• Familiarity with Zero Trust frameworks and SASE/SSE architectures.

Behavioral Skills

• Ability to analyze and troubleshoot complex systems.
• Attitude for documentation and knowledge sharing.
• Initiative, operational autonomy, and sense of responsibility.
• Ability to work in cross-functional teams.
• Propensity for continuous learning and technical updating.

Language Skills

Good written and spoken English, B2 level.

Other

Availability for national and international travel.

What we offer

• Our reference collective labor agreement is the CCNL for Private Metalworking Industry and Plant Installation.
• Work mode: Hybrid.
• Contract category: Employee.
• Contract type: permanent.
• Thirteenth month salary.
• Performance bonus linked to Business results.
• Welfare vouchers worth 250 euros annually.
• Company canteen.
• Opportunities for continuous training and updating of professional and soft skills.
• Well‑being: we put the economic, physical, social, and psychological well‑being of our people first, offering multiple solutions close to their needs.

Application

We await your application: send us your CV within three weeks from the opening of the job advertisement.

How does the selection process work? Following the collection of applications, the CVs most in line with the required requirements are evaluated and identified. The selected candidates undergo an introductory interview with the Human Resources team, motivational and aptitude-based, followed by a technical in-depth interview with the Business. At the end of the process, feedback is provided to the person, both in case of a positive and negative outcome.