ZEISS

Security Architect - AI (f/m/x)

Germany · Work style not stated · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerZEISS
LocationGermany
Work styleWork style not stated
Employment typeFull time
Employer posted27 Jul 2026

Your Role:

You will be the go‑to expert forAI security architecture, shaping how we securely design, build, and operate AI solutions across ZEISS.

Your responsibilities will include:

Design secure reference architectures and patterns forAI platforms and AI applications

Consult product, data science, and platform teams on secure AI design and implementation

Secure AI systems againstdata poisoning, model theft, adversarial attacks, and other AI‑specific threats

Define and implement measures formodel integrity, data privacy, bias mitigation, and robustness

Performthreat modelingand risk reviews tailored to AI workflows and pipelines

Implement and manage data security measures

Ensure strong authentication and authorization (e.g.OAUTH2, RBAC, PIM) across AI services and platforms

Design and implement secure architectures for cloud platforms (i.e. Azure, AWS, GCP)

Show full description

Guide secure use ofcontainers, orchestration, andInfrastructure as Code(e.g.Terraform, PowerShell) for AI workloads

Integrate requirements fromISO/IEC 27001, SOX, HIPAA, PCI DSSinto AI security concepts

Ensure alignment withethical AI principlesand evolving AI regulation, including theEU AI Act

Define and review security concepts for AI platforms; conductsecurity reviewsandarchitecture assessments

Supportincident responserelated to AI systems, advising on detection, containment, and remediation

Technical leadership and collaboration with international security teams, fostering collaboration across diverse, cross-functional groups

Act as a key link betweencentral security, regulatory functions, and theDigital Technology Accelerator

Contribute actively to the ZEISS‑wide security community, sharing best practices in AI security

Your Profile:

A Master's degree in Computer Science, Software Engineering, Electrical Engineering, Mechanical Engineering, Mathematics, or Physics

Minimum of 7+ years of professional experience in roles such as data modeling, algorithm development, data science, or similar fields

Proven track record in designing and implementing secure architectures for AI platforms and AI-driven use cases

Cloud Security: Certifications or training in cloud platforms (AWS, GCP, Azure preferred) and expertise in cross-provider cloud technologies (e.g., Microsoft Azure, Google GCP, Amazon AWS, Alibaba)

Strong understanding of software architectures, design patterns, and abstract thinking, with the ability to map capabilities to technologies effectively

Knowledge of HSM, certificate infrastructures, key vaults, TLS protocols, and authentication methods like OAUTH2

Expertise in securing AI platforms, addressing risks like data poisoning and model theft, and ensuring compliance with ethical AI principles, regulatory standards, and the EU AI Act

Experience with regulatory frameworks (ISO/IEC 27001, SOX, HIPAA, PCI DSS, EU AI Act) and integrating compliance requirements into AI security strategies

Proficiency in Python, managing code repositories, containerizing artifacts, and implementing "Infrastructure as Code" using tools like Terraform and PowerShell

Proven ability to give technical guidance to international teams, fostering collaboration and driving security initiatives across diverse, cross-functional groups

Preferred Certifications

AI Security Certifications (e.g., AI-specific cybersecurity certifications)

Advanced Cloud Security Certifications (e.g., AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer Associate)

Your ZEISS Recruiting Team:

Markus Repp

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.