Cloud Security Architect

Il y a 1 jour

Brussels, Brussels Capital, Belgique recurv Temps plein

Context

  • For a large enterprise environment undergoing a significant cloud transformation, we are looking for an experienced Cloud Security Architect with a strong focus on AWS.
  • You will join the Security Architecture team within the CISO Office and act as a technical authority on cloud security. The role combines hands-on cloud security expertise with architecture governance: defining security patterns and controls, reviewing and challenging solution designs, identifying risks and supporting engineering teams in implementing Security by Design.

Responsibilities

  • Define cloud security standards, guardrails, patterns and reference architectures.
  • Design security controls for AWS environments, with Azure as an additional plus.
  • Define secure architectures around IAM, networking, encryption, containers, logging and monitoring.
  • Review and challenge cloud solution architectures from a security perspective.
  • Perform threat modelling and architecture risk assessments.
  • Identify security gaps and define appropriate remediation measures.
  • Contribute to and further develop the Cloud Security Control Framework.
  • Define reusable security blueprints for cloud and cloud-native technologies.
  • Support engineering teams during architecture, design and implementation.
  • Embed Security by Design and Zero Trust principles across cloud initiatives.
  • Collaborate with Security Risk and Security Operations teams.
  • Assess the security implications of emerging cloud technologies and AI services.
  • Participate in architecture governance and review boards.

Profile

  • 10+ years of experience within IT / Cybersecurity.
  • 5+ years of experience in Cloud Security Architecture.
  • Strong hands-on expertise with AWS security architecture.
  • Proven experience defining cloud security controls, patterns, guardrails and reference architectures.
  • Experience with threat modelling and cloud architecture security assessments.
  • Strong knowledge of:
  • AWS IAM
  • VPC, Transit Gateway, Security Groups & NACLs
  • EKS / ECS & container security
  • KMS, encryption & secrets management
  • GuardDuty, Security Hub, Inspector & WAF
  • Logging, monitoring & detection
  • Terraform / CloudFormation
  • DevSecOps & security automation
  • Familiar with frameworks such as NIS2, ISO 27001, CIS and NIST CSF.
  • AWS Security Specialty certification is a strong plus.
  • Able to challenge architects and engineering teams while remaining pragmatic and solution-oriented.
  • Fluent in English. Dutch and/or French is a plus.

What we are looking for

  • We are looking for a genuine Cloud Security Architect rather than a general Enterprise Architect or GRC profile. You should be technically comfortable going deep into AWS architecture and translating security risks into concrete technical controls.