Enterprise Architect

VASS BeNeLux is currently seeking an Enterprise Architect to work for the European Commission.

The role:

• Manage projects throughout their full lifecycle, ensuring timely delivery, quality standards, and effective resource management.
• Coordinate project teams, contractors, business stakeholders, and Member States representatives.
• Monitor project progress, risks, issues, changes, and provide regular reporting and escalation when needed.
• Ensure compliance with DG TAXUD methodologies, governance, procedures, security policies, and architecture standards.
• Review, assess, and recommend technical solutions, technologies, and contractor deliverables.
• Support system integration, interoperability, and alignment with enterprise architecture.
• Produce, review, and maintain project, technical, and governance documentation.
• Support, administer, and improve DevSecOps, CI/CD, containerization, cloud, and ALM platforms.
• Manage and support tools such as Jira, Confluence, Jenkins, Nexus, SonarQube, Bitbucket, Kubernetes, Tanzu, and AWS.
• Promote DevSecOps best practices, automation, continuous delivery, and secure software development.
• Conduct security assessments, risk analysis, vulnerability management, and compliance monitoring.
• Integrate security requirements into solution design, implementation, operations, and cloud environments.
• Support incident response, business continuity, disaster recovery, and information security governance.
• Contribute to architecture strategy, technology evolution, and service improvement initiatives.
• Support and enhance DG TAXUD Digital Shared Services, including eArchiving, Kafka/Confluent, Elastic Stack, Tanzu, Jenkins/Nexus, and Bitbucket.

Specific Expertise:

• Minimum 10 years of IT experience, including 5+ years in IT Security and 3+ years in DevSecOps, Containers, CI/CD security integration, and Secure SDLC (S-SDLC).
• Strong expertise in security management, security assessments, vulnerability management, penetration testing, risk management, and security audits.
• Experience with security frameworks and standards such as ISO 27001, NIST, COBIT, COSO, GDPR, and other regulatory requirements.
• Hands‑on experience with cryptography, network security, IAM, key management, firewalls, IDS/IPS, encryption technologies, and security operations tools.
• Experience in software development (Java is an asset) and reviewing technical and security documentation.
• Strong knowledge of incident response, business continuity, and cloud security, particularly in AWS environments.
• Proven experience administering IT systems (including Linux), developing scripts (e.g., Groovy), and managing REST‑based services.
• Expertise in designing, implementing, and maintaining DevSecOps and CI/CD pipelines using tools such as Jenkins and GitLab.
• Experience with monitoring and observability solutions such as Elastic Stack, Splunk, and Dynatrace.
• Expertise in SAST (e.g., Fortify), SCA (e.g., Sonatype Lifecycle), Containers, Kubernetes, and cloud-native technologies.
• Ability to define, implement, and maintain security strategies, policies, controls, and governance frameworks.
• Experience with Apache Kafka/Confluent, Elastic Stack, Tanzu, Nutanix, and eArchiving solutions is considered an asset.
• Strong documentation skills using Confluence or similar collaboration tools.
• Knowledge of Agile, Lean SDLC, ITIL, TOGAF, and PM² methodologies is an advantage.
• Relevant certifications such as CISSP, CCSP, CISM, CISA, CEH, AWS Security Specialty, Security+, ITIL, Agile, TOGAF, or PM² are considered assets.