CYS_Security Architect_GCSC

Job Description:

Leonardo is an international industrial group, among the leading global players in Aerospace, Defense, and Security, which creates multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security, and Space. With over 60,000 employees worldwide, the company has a solid industrial presence in Italy, the United Kingdom, Poland, the United States, and operates in 150 countries also through subsidiaries, joint ventures, and shareholdings. A key player in major global strategic programs, it is a technological and industrial partner for Governments, Defense Administrations, Institutions, and businesses.

Within the Cyber & Security Solutions Business Area, we are looking for a Security Architect for our Milan Nerviano office with the possibility of employment also in the Rome Laurentina, Genoa Fiumara, and Chieti Scalo offices.

The person will be responsible for the following activities:

• Implementation and configuration, integration, customization of PAM solutions (e.g., CyberArk, SSH PrivX, BeyondTrust, Delinea/Thycotic, HashiCorp Vault) at enterprise clients, management of cryptographic keys and secrets;

• Supporting clients in implementing privileged access policies in line with frameworks such as ISO 27001, NIST, DORA, NIS2;

• Defining IAM architectures (Identity Governance, RBAC, ABAC, Zero Trust) integrated with the client's corporate systems;

• Configuring and integrating connectors to Active Directory, LDAP, Azure AD / Entra ID, SAP, cloud and on-premise applications;

• Managing the complete delivery cycle: implementation, testing, go-live, and handover;

• Producing technical documentation (HLD, LLD, runbook, operating procedures);

• Participating in risk assessment and audit sessions related to identity and access;

• Interfacing with technical and managerial contacts of clients during all project phases;

• Collaborating with other security engineers from other teams (SOC, vulnerability management, network security);

• Supporting pre-sales activities in effort estimation and drafting technical proposals;

• Ensuring knowledge transfer to internal teams at the end of the project.

Education:

Master's Degree in Computer Science/Computer Engineering/Telecommunications Engineering or STEM (alternative paths with proven experience are also evaluated).

Seniority: Senior: at least 5 years of experience required.

Technical knowledge and skills:

• Essential Requirements:

  • Proven experience in designing and implementing PAM/IAM solutions in Enterprise contexts;
  • In-depth knowledge of at least one of the main PAM platforms: CyberArk (EPV, PSM, PVWA, AIM), BeyondTrust Password Safe, Delinea Secret Server / Privilege Manager;
  • Solid knowledge of Active Directory, Azure AD / Microsoft Entra ID, Kerberos, LDAP;
  • Familiarity with authentication and federation protocols: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM;
  • Ability to work independently on complex projects with defined deadlines.

• Preferential Requirements:

  • Knowledge of the PAM SSH PrivX platform;
  • PAM/IAM vendor certifications (e.g., CyberArk Defender/Sentry, BeyondTrust Certified Administrator);
  • Industry certifications: CISSP, CISM, CompTIA Security+;
  • Experience with IGA (Identity Governance & Administration) solutions: SailPoint IdentityNow/IIQ, Saviynt, One Identity;
  • Knowledge of cloud environments (AWS IAM, Azure RBAC, GCP IAM) and container security (Kubernetes RBAC);
  • Experience in consulting or system integration contexts with managing multiple clients in parallel;
  • Knowledge of scripting/automation: PowerShell, Python, REST API;
  • Familiarity with Zero Trust frameworks and SASE/SSE architectures.

Behavioral skills:

• Ability to analyze and troubleshoot complex systems;

• Attitude for documentation and knowledge sharing;

• Proactive attitude, operational autonomy, and sense of responsibility;

• Ability to work in cross-functional teams;

• Propensity for continuous learning and technical updating.

Language skills: Good knowledge of written and spoken English, B2 level.

Other: Availability for national and international travel.

Commitment, enhancement of skills, care for the well-being and safety of people are the cornerstones of our corporate culture.

We strive every day to foster an inclusive and stimulating work environment, actively promoting the principles of inclusion, equity, and diversity valorization.

What we offer?

• Our collective labor agreement of reference is the CCNL for Private Metalworking Industry and Plant Installation;

• Working mode: Hybrid;

• Contractual category: Employee;

• Contract type: permanent;

• Thirteenth month's salary;

• Bonus linked to Business results;

• Welfare vouchers worth 250 euros annually;

• Company canteen;

• Opportunities for continuous training and updating of professional skills and soft skills;

• Well-being: we prioritize the economic, physical, social, and psychological well-being of our people, offering multiple solutions tailored to their needs.

The company reserves the right to make assessments regarding the level of classification and the economic proposal, based on objective criteria emerged during the selection process and in line with the seniority of the identified candidate and the position, in compliance with the principles of fairness, transparency and equal opportunities provided for by current legislation.

We look forward to your application: send us your CV within three weeks of the job announcement opening.

How does the selection process work? Following the collection of applications, CVs most in line with the required qualifications are evaluated and identified. Selected candidates will have an introductory interview with the Human Resources team, focusing on motivation and aptitude, followed by a technical in-depth interview with the Business. At the end of the process, feedback is provided to the person, both in case of a positive and negative outcome.

Seniority: Senior

Primary Location: IT - Milano - Nerviano

Additional Locations: IT - Chieti Scalo, IT - Genova - Fiumara, IT - Roma - Via Laurentina

Contract Type: Permanent

Total Base Pay Range: 40K - 59K

Hybrid Working: Ibrido