Specialist - Information Security

Specialist - Information Security

Team description

“Security Middleware” is one of the teams contributing to the security of the Amadeus cloud platform. The team brings together security specialists, Site Reliability Engineers (SREs), software developers and network engineers across NCE, Erding and Bangalore.

Together, the team develops, maintains and evolves middleware software and tools used by other divisions. Our organization (TSI-PFS-CFS) is responsible for building the cloud platform foundation used by Amadeus applications.

Security Middleware participates in the Security Solutions Scaled Agile Framework (SAFe) train and forms the virtual “Secrets, Keys and Certificates Management” team.

As a DevSecOps specialist, you'll work with cybersecurity, cloud and automation technologies, including:

• Cryptographic and key management: CryptoManager interfaces applications with Hardware Security Modules (HSMs), while Sekhmet supports point-to-point client authentication.
• Secret management: CyberArk Daemon and Secret Operator support secret management across Microsoft Azure Key Vault and Google Cloud Platform (GCP) Secret Manager.
• Certificate management: Venafi supports certificate lifecycle management and interacts with Amadeus' production Public Key Infrastructure (PKI) and trusted Certificate Authorities (CAs).
• Encryption: You'll contribute to capabilities supporting encryption at rest and in transit.
• Automation and self-service: Terraform and Kratix support automation and self-service capabilities across these components.

Summary of the position

As Amadeus continues its cloud migration, you'll help address evolving security requirements across Microsoft Azure and Google Cloud. You'll contribute to secure, resilient cloud capabilities while developing your expertise across cybersecurity, automation, secret management, certificate management and cryptographic technologies.

As part of the team, you'll contribute to:

• Improving platform security across Microsoft Azure and GCP while helping maintain reliable and resilient services.
• Strengthening and simplifying security solutions while supporting compliance requirements, including components subject to Payment Card Industry (PCI) audits.
• Developing self-service capabilities for GCP secret management and certificate management.
• Developing key-management capabilities and improving crypto-agility, including Transport Layer Security (TLS) certificate management on F5 technologies.
• Working with teams across locations to improve security automation and operational sustainability.

In the SMW/SKC team, you'll have opportunities to develop your knowledge of multi-cloud security and automation. You'll work across locations and collaborate with other teams, Security Train colleagues and automation specialists while taking responsibility for agreed activities and learning relevant technologies.

Main expectations

• Cybersecurity and engineering: Relevant experience in information technology engineering, cybersecurity, DevSecOps, or a related area, with an understanding of security principles and operational sustainability.
• Software development and automation: Experience with technologies such as C++, Python, Unix, Shell, Jenkins, Terraform, Ansible or Kratix, with the ability to contribute to system administration and automation activities.
• Cloud and containers: Knowledge of Microsoft Azure, Google Cloud Platform, Kubernetes or Docker and an interest in applying security practices within cloud environments.
• Technical problem solving: Ability to investigate technical issues, contribute to technical initiatives and continue developing knowledge of relevant technologies. Familiarity with the Scaled Agile Framework can support collaboration with the team's existing delivery model.
• Collaboration: Ability to work independently when appropriate and collaborate effectively with colleagues across teams, disciplines, cultures and locations.

What We Can Offer You

• 🎯 A critical mission and purpose - At Amadeus, you'll power the future of travel with a critical mission and extraordinary purpose.
• 🌎 A truly global DNA - Everything at Amadeus is global, from our people to our business, which translates into our footprint, processes, and culture.
• 🎓 Great opportunities to learn - Learning happens all the time and in many ways at Amadeus, from on-the-job training to formal activities and daily interactions.
• 🤗 A caring environment – Amadeus fosters a caring environment that supports both professional growth and personal well-being.
• 💰 A complete rewards offer - Amadeus provides attractive compensation packages, including salary, bonus, caregiving and health benefits.
• 🌟 A flexible working model - Embrace our flexible working model, enabling you to excel wherever and however you work best.
• 🌈 A diverse, equitable, and inclusive community – We are committed to enabling each employee to reach their full potential by fostering a culture of belonging and fair treatment.
• 📈 A Reliable Company - Trust and reliability are fundamental to shaping our relationships with customers, partners, and employees.

Diversity & Inclusion

Amadeus aspires to be a leader in Diversity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience.  

Amadeus is an equal opportunity employer and committed to an accessible recruitment process. All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability or any other characteristics protected by law.

 

Be aware of recruitment scams

Amadeus Group never charges fees, requests payment, or asks for financial information during recruitment. All legitimate opportunities are communicated solely through official Amadeus channels, including our careers website. Any payment request or outreach via unofficial platforms (e.g., WhatsApp, Telegram) should be treated as fraudulent.