Cloud Security Architect

Key Responsibilities

• Establish and evolve cloud security standards, governance models, reference architectures, and security guardrails across AWS and Azure environments.
• Develop repeatable architecture patterns and security blueprints to support cloud-native deployments.
• Translate business and technical objectives into security requirements for cloud services and platforms.
• Architect secure cloud solutions covering areas such as identity and access management, network segmentation, encryption, key lifecycle management, monitoring, logging, container platforms, Kubernetes, and DevSecOps practices.
• Assess solution architectures to identify vulnerabilities, security exposures, and compliance gaps.
• Lead and facilitate threat modelling exercises and cloud-focused security assessments.
• Recommend mitigation strategies and contribute to formal risk treatment and acceptance processes.
• Support architecture governance forums and technical review boards.
• Partner with security operations and engineering teams to strengthen monitoring, detection, and incident response capabilities within cloud environments.
• Advocate for secure engineering practices and drive adoption of Security-by-Design principles throughout the organisation.

Required Experience

• Minimum 10 years' experience across IT infrastructure, cybersecurity, or security architecture disciplines.
• At least 5 years specialising in Cloud Security Architecture, with hands-on design and implementation expertise.
• Demonstrated experience applying and operating cloud security control frameworks.
• Strong background designing and securing AWS-based cloud environments.
• Experience creating cloud security standards, reusable design patterns, and architectural frameworks within AWS. Exposure to Azure is beneficial.
• Proven capability conducting security risk assessments and threat modelling activities.
• Experience reviewing solution designs from a security architecture perspective and providing remediation recommendations.

Strong practical knowledge of:

• AWS Identity & Access Management (IAM)
• Cloud Network Security, including VPCs, Transit Gateway, Security Groups, and Network ACLs
• Container and Kubernetes Security, particularly EKS and ECS
• Infrastructure as Code (IaC) using Terraform and CloudFormation
• Cryptography, Encryption, and Secrets Management
• Security monitoring, logging, alerting, and detection mechanisms
• Security automation and DevSecOps tooling
• AWS-native security services including GuardDuty, Security Hub, Inspector, WAF, and KMS

Additional Requirements

• Good understanding of recognised security and compliance frameworks, including NIS2, ISO 27001, CIS Controls.
• Strong stakeholder engagement and communication skills with the ability to influence both technical and non-technical audiences.
• Fluent English communication skills, both written and verbal.
• Knowledge of Dutch and/or French would be advantageous.
• AWS Certified Security certification is highly desirable.