Technology Security Architect

Job description

Context

A leading company develops and supports business-critical IT systems for the Belgian energy market, including the Central Market System and the Pre-payment platform.

Security and cyber resilience are an integral part of the technology architecture and software development within the company.The company is an essential entity under NIS2 and an ISO 27001-certified organization.

The company aims to further embed security according to secure-by-design and security-by-default principles.

The role focuses on Azure cloud security, identity and access management, API and container security, DevSecOps, threat modeling, and automated security controls within CI/CD.

Missions

• Define and monitor security architecture principles, guardrails, and secure-by-design standards

• Integrate security into the SDLC from design and development through testing and deployment

• Advise on and review solution and technical designs from a security perspective

• Execute and facilitate threat modeling and security architecture reviews

• Advise on identity and access management, API security, container security, cloud security, and Azure cloud-native architectures

• Define and help automate security controls within CI/CD and DevSecOps processes

• Advise on secure coding, software dependencies, and vulnerability management

• Support development and platform teams in identifying and mitigating technical security risks and vulnerabilities

• Contribute to security analyses for incidents and technical vulnerabilities and advise on structural improvements

• Follow relevant technological developments, threats, and vulnerabilities and translate them into architecture and security measures

Working Conditions

• Preferred start date: 01/12/2026

• Preferred end date: 01/12/2027

Requirements

1. 5 years of proven experience as an architect within ICT security solutions
2. 5 years of proven experience in managing and implementing IAM according to company policies
3. 3 years of proven experience securing Azure containers and Kubernetes clusters
4. 3 years of proven experience implementing and following secure software development (DevSecOps)
5. 3 years of proven experience translating ISMS and security policies into concrete solutions
6. 3 years of proven experience working with external development teams
7. Strong knowledge of security architecture principles, guardrails and secure-by-design standards
8. Experience with integration of security into the SDLC
9. Experience in threat modeling and security architecture reviews
10. Expertise in identity and access management, API security, container security, cloud security, and Azure cloud-native architectures
11. Knowledge of secure coding, software dependencies management, and vulnerability management
12. Ability in security risk identification and mitigation and security analyses for incidents and technical vulnerabilities
13. Experience with security controls, CI/CD processes, and DevSecOps
14. Familiarity with security standards, procedures and guidelines, risk management, ISMS, ITIL, and platform engineering
15. Proficiency in Azure and Kubernetes
16. Language skills: Dutch or French - CEFR C1 and other national language - CEFR B2