Landis+Gyr EMEA, formerly part of the Landis+Gyr Group, supports electricity, gas, water and thermal utilities in managing increasingly complex networks, improving operational efficiency and enabling more sustainable use of resources.

 
With more than 2.800 employees in 19 countries and decades of experience in critical infrastructure technology, the company provides advanced metering, network intelligence and digital solutions to utilities and infrastructure operators primarily across Europe, Middle East and Africa. As a standalone organisation, Landis+Gyr EMEA builds on long-standing customer relationships and proven technology capabilities, backed by experienced regional teams.

We are looking for Lead Security Architect who will make sure security requirements are translated into clear technical designs and practical implementation standards. The role supports major changes, reviews security-sensitive designs, challenges vendor/MSP proposals where needed, and helps ensure security controls are realistic, documented, and implemented.

Main responsibilities:

• Act as the technical security bridge between IT Infrastructure and IT Security.
• Design and review secure architecture for Microsoft cloud, Entra ID, infrastructure, endpoint, network, and access security.
• Own and review identity security topics, including Conditional Access, MFA, PIM, admin roles, break-glass accounts, Enterprise Apps, app registrations, service principals, and OAuth permissions.
• Help define and improve the privileged access model, including admin accounts, jump hosts, PAW concepts, FIDO2/MFA, and least privilege.
• Review Intune security, device compliance, endpoint access, and Microsoft 365 security baseline requirements.
• Review major infrastructure, cloud, identity, and security changes before implementation.
• Help define network and security architecture concepts such as segmentation, management access, VPN access, firewall governance, and secure admin paths.
• Define technical security standards, design patterns, and architecture guidelines for cloud, identity, infrastructure, and access security.
• Assess security exceptions and define realistic compensating controls where the ideal solution cannot be implemented immediately.
• Define logging and visibility requirements to support monitoring, investigation, and response.
• Support incident lessons learned by identifying required architecture or control improvements.
• Challenge MSP/vendor designs where needed and ensure external solutions align with internal security and infrastructure standards.
• Support the Head of IT Infrastructure & IT Security with technical strategy, roadmap planning, risk prioritization, and leadership-ready summaries.
• Mentor and guide engineers on secure design principles without taking over daily operational ticket work.

Our requirements:

• Minimum 5 years of experience in IT Security, Security Architecture, Infrastructure Security, or Identity Security
• Strong hands-on experience with Microsoft security technologies, especially Entra ID, Conditional Access, MFA, PIM, Intune, and Microsoft 365 security
• Proven experience designing and reviewing secure architecture across cloud, identity, endpoint, network, and infrastructure environments
• Experience in a Technical Lead, Senior Engineer, or Architect-level role, guiding engineers and acting as a trusted technical advisor
• Experience working with Infrastructure, Security, InfoSec/GRC, vendors, and external service providers
• Experience reviewing, challenging, and improving vendor/MSP designs from a security and infrastructure perspective
• Experience supporting audits, risk assessments, security exceptions, and the implementation of compensating controls
• Experience translating security requirements into practical technical standards, designs, and implementation guidance

We value and encourage diversity in our team. This position is open to all qualified candidates regardless of gender, race, age, disability, sexual orientation, or background. We're committed to shaping a better future for everyone. #EnergizeYourCareer and join us on our journey towards a greener tomorrow.