About this Application Platform & Security Senior Architect (m/f/d) role at Red Hat
Red Hat Europe, Middle East, and Africa (EMEA) Consulting is looking for a Senior Architect to join our EMEA Solutions and Technology Practice team, focused on Application Development, Application Platforms, and Security. In this role, you will specialize in Red Hat’s container, application platform, and Trusted Software Supply Chain (TSSC) technologies—including Red Hat Lightwell initiatives.
You will be the primary technical guide for implementing security solutions based on Red Hat technology, such as Red Hat Advanced Cluster Security or Red Hat Advanced Developer Suite; and integrating the same with third-party tools. You will architect zero-trust, hermetic build environments that enable customers to confidently run workloads across the open hybrid cloud while meeting strict regulatory requirements (such as the EU Cyber Resilience Act and NIST Secure Software guidelines). You’ll work with our customers to understand their current and desired state of container and security application adoption. Your ultimate goal will be to help customers reach their desired state through the use of Red Hat’s technology and services portfolio.
As an Architect, you’ll need to have deep technical expertise, passion for open source, a thorough understanding of business processes, and the ability to identify and create business value at the enterprise level. In addition, you’ll need to have a solid working knowledge of agile project methodologies and DevSecOps models and technologies.
What you will do:
- Implement the Advanced Developer Suite: Guide platform engineering teams in rolling out Red Hat Developer Hub, integrated with specialized TSSC layers, to abstract infrastructure complexity and enforce rigorous security guardrails.
- Consume and generate SBOMs & Vulnerability Management (with TPA): Design and deploy Red Hat Trusted Profile Analyzer (TPA) to centralize the management of Software Bills of Materials (SBOMs), Vulnerability Exploitability Exchange (VEX) data, and CVE tracking. Enable real-time risk visibility and "Exploit Intelligence" (ExploitIQ) to eliminate vulnerability noise for development teams.
- Enforce Cryptographic Provenance (with TAS): Integrate Red Hat Trusted Artifact Signer (TAS) (the enterprise-ready Sigstore deployment) into CI/CD pipelines. Establish keyless and identity-based cryptographic signing (via OIDC) for code commits (gitsign), binaries, and container images (cosign), creating an immutable and queryable transaction log (rekor).
- Drive Full-Lifecycle Cluster Security (with ACS): Architect Red Hat Advanced Cluster Security (ACS) to govern Kubernetes environments. Define policies that bridge build-time provenance and runtime defense, ensuring that only artifacts cryptographically signed by TAS and analyzed by TPA are cleared for deployment.
- Help customers evolve from thinking about Red Hat OpenShift Container Platform as mere infrastructure to thinking of it as a technology which can drive business value; articulate potential business changes, backed by Red Hat’s technology, that can grow tangible business value
- Build and follow strategic customer engagements, following Red Hat’s standard offers like the Application Platform Journey to support a risk-focused approach to modernization, based on a clear understanding of the customer’s current state architecture, key performance indicators, workloads, development environment, and lines of business concerns
- Advise and set up workflows and programs for application modernization
- Become a virtual member of the customer’s team, enabling and mentoring customers in the development and deployment of applications on Red Hat OpenShift Container Platform
- Represent EMEA as a subject matter expert (SME) in global solution development sprints
- Support the EMEA Regions with awareness, enablement and provide assistance in presales activities like discovery sessions, RFIs, and RFPs.
What you will bring:
- TSSC Tooling Mastery: Deep technical experience with the components of the Red Hat Advanced Developer Suite:
- Red Hat Trusted Profile Analyzer (TPA): Practical handling of Software Composition Analysis (SCA) tools, SBOM ingestion/cross-referencing, and VEX implementation.
- Red Hat Trusted Artifact Signer (TAS) / Sigstore ecosystem: Hands-on experience with cosign, gitsign, and rekor for generating automated chain-of-trust documentation and non-repudiable build attestations.
- Red Hat Advanced Cluster Security (ACS): Expertise in Kubernetes-native security, compliance auditing, and network policy enforcement.
- Compliance Alignment: Ability to map technical architectures directly to security and compliance frameworks like SLSA (Supply Chain Levels for Software Artifacts), ensuring automated, policy-based enforcement across multi-cloud landscapes.
- Developer Platform Integration: Understanding of internal developer portals (such as Red Hat Developer Hub based on Backstage) and how to bake security directly into pre-approved, self-service application templates.
- Ability to have conversations at multiple customer levels like decision makers, DevSecOps, architects, developers, and infrastructure to extract and define system requirements, use cases, and priorities
- Extensive knowledge of application runtimes, enterprise container architectures and solutions, Red Hat OpenShift and alternative solutions, Linux, and deploying and running container solutions in private, public, and hybrid clouds
- Very good understanding of DevSecOps maturity models
- Experience with agile frameworks and principles with deep knowledge of agile methods and practices
- Experience with a digital transformation effort as part of consulting or as a customer
- Experience working in application development and enterprise application architecture, including microservices
- Experience in delivering applications to production with development technologies and frameworks
- Understanding and experience with DevSecOps
- Experience with configuring and consuming modern application delivery tools in development and deployment of applications to production
- Good communication and presentation skills in business English, with a record of developing relationships at technical, management, and executive levels
- 5+ years of experience in a medium to large development environment, preferably as a consultant or an architect
- Experience with modern application development practices and application and systems architecture
- Ability to discuss matters of scope, delivery, and technical decisions with technical peers, technical leads, customer SMEs, client mid level managers, and service delivery managers
#LI-MP2
About Red Hat
Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40+ countries, our associates work flexibly across work environments, from in-office, to office-flex, to fully remote, depending on the requirements of their role. Red Hatters are encouraged to bring their best ideas, no matter their title or tenure. We're a leader in open source because of our open and inclusive environment. We hire creative, passionate people ready to contribute their ideas, help solve complex problems, and make an impact.
Inclusion at Red Hat
Red Hat’s culture is built on the open source principles of transparency, collaboration, and inclusion, where the best ideas can come from anywhere and anyone. When this is realized, it empowers people from different backgrounds, perspectives, and experiences to come together to share ideas, challenge the status quo, and drive innovation. Our aspiration is that everyone experiences this culture with equal opportunity and access, and that all voices are not only heard but also celebrated. We hope you will join our celebration, and we welcome and encourage applicants from all the beautiful dimensions that compose our global village.
Equal Opportunity Policy (EEO)
Red Hat is proud to be an equal opportunity workplace and an affirmative action employer. We review applications for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, age, veteran status, genetic information, physical or mental disability, medical condition, marital status, or any other basis prohibited by law.
