Staff System Architect (m/f/d)

We are extending the architectural foundation for our complex multi-service environment that connects multiple systems, data sources, and workflows at scale achieving real-time intelligence for product transparency, vulnerability operations. As Staff System Architect, you define this platform end to end and remain hands-on where a prototype or code review resolves uncertainty. In this role, you lead through architecture, decisions, and influence teams without direct reports, line management, or personnel responsibility.

Challenges You Will Solve at Scale

• Architect enterprise-scale greenfield systems and evolve existing architectures to meet stringent service-level agreements for availability, performance, and reliability.
• Connect many enterprise systems including systems you do not own and cannot change into one coherent, trustworthy platform.
• Keep product-security attributes accurate and current across a large, continuously changing estate of products and components.
• Enforce consistent identity, access, and data-boundary controls across systems, so that trust and auditability hold at scale.
• Evolve live systems toward the target architecture without stopping them, while balancing performance, resilience, and cloud cost.
• Align architects, engineers, and system owners on decisions without formal authority over them.

Key Responsibilities

• Own the target architecture and the roadmap from today’s landscape to it, including migrations and cutovers for systems that cannot be switched off.
• Translate enterprise architecture into system architecture: partner with the Principal Key Expert Enterprise Architect to turn enterprise-level capabilities, principles, and target states into concrete, implementable system designs, and feed system-level constraints and trade-offs back into the enterprise architecture.
• Design component and data architecture: decompose the platform into well-bounded serverless functions, containerized services, and managed cloud services; select and model databases and storage.
• Define APIs and integration interfaces: design synchronous request/response, push-based events and webhooks, pull-based polling and batch synchronization, and streaming, with clear ownership, contracts, and SLAs.
• Define boundaries and contracts: decide which system owns which data and decision, and make the interfaces between systems explicit and versioned.
• Architect security and identity: role and permission flows across systems, data-boundary controls, threat modeling, and audit evidence by design.
• Set and meet non-functional targets for performance, availability, scale, and cloud cost; choose data stores and justify each choice.
• Make and record decisions: drive build-versus-buy calls, maintain architecture decision records, and keep documentation trustworthy.
• Lead technically across teams: review designs and technical decisions of architects and engineers, prototype risky parts yourself, and explain the architecture to engineering, security, and management.

Required Skills

• Experience: 10+ years in software engineering and architecture, including owning architectures across multiple systems and taking systems from design to production.
• Architecture practice: ADRs, C4 or similar models, threat modeling, capacity planning, and proof-of-concept-led build-versus-buy analysis.
• Distributed systems and integration: event-driven design, workflow orchestration, resilience patterns (idempotency, retries, sagas, outbox, CDC), and versioned REST/OpenAPI contracts.
• Data architecture: selecting relational, document, graph, search, and analytical stores; large-scale data modeling, retention, and classification.
• Security architecture: RBAC/ABAC, identity federation and SSO, least-privilege IAM, secrets management, and auditability.
• AWS and operations: cost-aware multi-service AWS designs with Terraform or CDK; SLOs, observability, incident response, and non-disruptive migrations.
• Hands-on engineering: production experience in at least one of Go, Java, Kotlin, C#, Rust, Python, or TypeScript.
• Technical leadership without authority: guide architects and engineers, resolve cross-team design disputes, and build agreement through clear reasoning and excellent written and spoken English.

Nice to have

• Product security: SBOM, CBOM, VEX, vulnerability management, and standards such as CycloneDX, SPDX, PURL, and CPE.
• Supply chain security: provenance, signing, attestations, SLSA, in-toto, and AI/model supply chains.
• Cryptographic agility: cryptographic inventories, certificate lifecycles, and post-quantum readiness.
• Enterprise platforms: Entra ID, SCIM, service management, and platform engineering (paved roads, CI/CD guardrails).
• Regulated environments: EU Cyber Resilience Act, NIS2, ISO 27001, or IEC 62443.

What do we offer?

• Hybrid work model that supports flexibility and a sustainable work-life balance.
• An environment where everyone can bring their whole self to work and feel a sense of belonging.
• A workplace that values curiosity and guarantees continuous learning, with development opportunities for both personal and professional growth.
• Share matching programs to become a shareholder of Siemens AG.
• A wide range of flexible benefits for you and your family to enjoy

Did you know Siemens Spain has been recognized as one of LinkedIn’s Top Companies to work for in 2026? It’s more than just an award - it reflects a company where people grow, feel valued, and celebrate success together. Explore what your future at Siemens could look like!

At Siemens, we value the diversity of our teams, promote equal opportunities, and foster an inclusive work environment. We welcome talent without distinction, respecting and supporting all forms of diversity. Our Equality Plan, in accordance with current legislation, ensures fair and transparent treatment, and reinforces our commitment to building an increasingly equitable and diverse workplace.

#LI-DL #LI-HYBRID