Enterprise Architect

pVASS BeNeLux is currently seeking an Enterprise Architect to work for the European Commission. /ph3The role: /h3ulliManage projects throughout their full lifecycle, ensuring timely delivery, quality standards, and effective resource management. /liliCoordinate project teams, contractors, business stakeholders, and Member States representatives. /liliMonitor project progress, risks, issues, changes, and provide regular reporting and escalation when needed. /liliEnsure compliance with DG TAXUD methodologies, governance, procedures, security policies, and architecture standards. /liliReview, assess, and recommend technical solutions, technologies, and contractor deliverables. /liliSupport system integration, interoperability, and alignment with enterprise architecture. /liliProduce, review, and maintain project, technical, and governance documentation. /liliSupport, administer, and improve DevSecOps, CI/CD, containerization, cloud, and ALM platforms. /liliManage and support tools such as Jira, Confluence, Jenkins, Nexus, SonarQube, Bitbucket, Kubernetes, Tanzu, and AWS. /liliPromote DevSecOps best practices, automation, continuous delivery, and secure software development. /liliConduct security assessments, risk analysis, vulnerability management, and compliance monitoring. /liliIntegrate security requirements into solution design, implementation, operations, and cloud environments. /liliSupport incident response, business continuity, disaster recovery, and information security governance. /liliContribute to architecture strategy, technology evolution, and service improvement initiatives. /liliSupport and enhance DG TAXUD Digital Shared Services, including eArchiving, Kafka/Confluent, Elastic Stack, Tanzu, Jenkins/Nexus, and Bitbucket. /li /ulh3Specific Expertise: /h3ulliMinimum 10 years of IT experience, including 5+ years in IT Security and 3+ years in DevSecOps, Containers, CI/CD security integration, and Secure SDLC (S-SDLC). /liliStrong expertise in security management, security assessments, vulnerability management, penetration testing, risk management, and security audits. /liliExperience with security frameworks and standards such as ISO 27001, NIST, COBIT, COSO, GDPR, and other regulatory requirements. /liliHands‑on experience with cryptography, network security, IAM, key management, firewalls, IDS/IPS, encryption technologies, and security operations tools. /liliExperience in software development (Java is an asset) and reviewing technical and security documentation. /liliStrong knowledge of incident response, business continuity, and cloud security, particularly in AWS environments. /liliProven experience administering IT systems (including Linux), developing scripts (e.g., Groovy), and managing REST‑based services. /liliExpertise in designing, implementing, and maintaining DevSecOps and CI/CD pipelines using tools such as Jenkins and GitLab. /liliExperience with monitoring and observability solutions such as Elastic Stack, Splunk, and Dynatrace. /liliExpertise in SAST (e.g., Fortify), SCA (e.g., Sonatype Lifecycle), Containers, Kubernetes, and cloud-native technologies. /liliAbility to define, implement, and maintain security strategies, policies, controls, and governance frameworks. /liliExperience with Apache Kafka/Confluent, Elastic Stack, Tanzu, Nutanix, and eArchiving solutions is considered an asset. /liliStrong documentation skills using Confluence or similar collaboration tools. /liliKnowledge of Agile, Lean SDLC, ITIL, TOGAF, and PM² methodologies is an advantage. /liliRelevant certifications such as CISSP, CCSP, CISM, CISA, CEH, AWS Security Specialty, Security+, ITIL, Agile, TOGAF, or PM² are considered assets. /li /ul