Technology Security Architect

We are looking for a Senior Technology Security Architect to strengthen the security of business-critical technology and application environments within the Belgian energy sector. The role focuses on defining secure architectures, embedding security throughout the full Software Development Lifecycle (SDLC) and translating security requirements into practical technical standards, controls and guardrails. The position requires strong expertise in Security Architecture, IAM, Azure Cloud Security, Kubernetes/Container Security and DevSecOps, combined with the ability to work closely with development teams, platform teams, architects, Risk and Compliance. The environment follows secure-by-design and security-by-default principles and operates within an ISO 27001-certified and NIS2-regulated context. Your

missions:
• Design, maintain and continuously improve secure technology and application architectures.
• Define and enforce security architecture principles, standards and guardrails.
• Embed security throughout the SDLC, from design and development to testing and deployment.
• Translate security objectives, policies and requirements into concrete technical solutions and security controls.
• Ensure that technology and application architectures follow secure-by-design and security-by-default principles.
• Support development and platform teams in identifying and mitigating technical security risks and vulnerabilities.
• Contribute to the continuous improvement of the organisation’s cyber resilience and security architecture. Your activities:
• Review solution and technical designs from a security perspective.
• Perform and facilitate threat modelling and security architecture reviews.
• Provide security guidance regarding Identity & Access Management (IAM), API security, container security, Kubernetes and Azure cloud-native architectures.
• Define and help automate security controls within CI/CD and DevSecOps processes.
• Advise teams on secure coding, software dependencies and vulnerability management.
• Support development and platform teams in identifying and mitigating technical security risks.
• Contribute to security analyses related to incidents and technical vulnerabilities and recommend structural improvements.
• Monitor relevant technology developments, cyber threats and vulnerabilities and translate them into appropriate architecture and security measures.
• Collaborate closely with development teams, platform teams, architects, Risk, Compliance and other stakeholders, including external development teams. You have the following

skills:
MUST HAVE
• 5+ years of proven experience as an ICT Security Architect.
• 5+ years of proven experience implementing and managing Identity & Access Management (IAM) in line with company policies.
• 3+ years of proven experience securing Azure containers and/or Kubernetes clusters.
• 3+ years of proven experience implementing and managing Secure Software Development / DevSecOps practices.
• Proven experience defining, implementing and enforcing security standards, procedures and guidelines.
• Proven experience in Risk Management.
• Strong knowledge of Azure Cloud Security and cloud-native architectures.
• Knowledge of API Security, CI/CD security controls, threat modelling, secure coding, software dependency security and vulnerability management.
• Dutch or French at CEFR C1 level, combined with at least CEFR B2 level in the other language. NICE TO HAVE
• Experience within the energy sector.
• Experience in Platform Engineering, including designing, building or managing shared technical platforms for development teams.
• 3+ years of experience translating ISMS and security policies into concrete technical solutions.
• Knowledge and practical experience with ITIL.
• 3+ years of experience working with external development teams. Practical Information
• On-site presence: In principle, at least 2 days per week
• Additional on-site presence may occasionally be required depending on project needs, meetings, onboarding, knowledge transfer, security, continuity or other operational requirements.
• Occasional travel to other offices or third-party locations, including distribution system operators, may be required.
• Motivated exceptions to the on-site arrangements may be possible depending on the assignment, project requirements, operational feasibility and applicable internal guidelines.