Integration Architect

Integration & Security Architect — GCP / SAP RISE Connectivity

Location: Brno, Czechia

Duration: 12-month contract

Engagement: B2B, subject to agreed contractual requirements

Working arrangement: Hybrid Working

The opportunity

Remarkable Resourcing is seeking an experienced Integration & Infrastructure Security Architect to design, implement and maintain the secure connectivity supporting the clients SAP S/4HANA RISE programme on Google Cloud.

The role focuses on the infrastructure that enables integration: network paths, firewalls, certificates, endpoints and secure file transfer. Application integration logic, SAP functional configuration and business processing are outside scope.

Key responsibilities

• Design and implement secure connectivity between infrastructure, GCP and the SAP RISE environment.
• Own the firewall rule request lifecycle: capture requirements, design source/destination and port/protocol rules, document justification, submit for approval, implement approved GCP changes, validate and close.
• Work within clients Global Security’s approval process; approval authority remains with that team.
• Maintain an authoritative connectivity register covering endpoints, network routes, ports, protocols, certificate dependencies and approval references.
• Own certificate issuance, installation, renewal, expiry monitoring and proactive replacement for in-scope infrastructure endpoints.
• Establish DNS, IP allow-listing, firewall and egress prerequisites for integration endpoints.
• Define secure SFTP and file-transfer connectivity patterns, including endpoint hardening, key management and encryption.
• Implement infrastructure hardening, encryption, key management and security logging.
• Troubleshoot reachability, ports, TLS handshakes, certificates, DNS and latency, distinguishing infrastructure faults from application issues.

Essential experience

• Enterprise infrastructure or network security architecture with hands-on implementation experience.
• Practical Google Cloud experience covering networking and infrastructure security.
• Strong firewall rule design, network segmentation and connectivity troubleshooting skills.
• Experience with TLS, PKI, digital certificates and certificate lifecycle management.
• Knowledge of DNS, routing, NAT, endpoint access and secure file transfer.
• Experience with infrastructure hardening, encryption, key management and security logging.
• Ability to translate application requirements into approved connectivity designs.
• Experience working within formal security approval and change management processes.
• Strong English communication and technical documentation skills.

If you have the above experience and this role is of interest, apply within and I will call you to discuss further.