Cloud Security Architect

Context

• For a large enterprise environment undergoing a significant cloud transformation, we are looking for an experienced Cloud Security Architect with a strong focus on AWS.
• You will join the Security Architecture team within the CISO Office and act as a technical authority on cloud security. The role combines hands-on cloud security expertise with architecture governance: defining security patterns and controls, reviewing and challenging solution designs, identifying risks and supporting engineering teams in implementing Security by Design.

Responsibilities

• Define cloud security standards, guardrails, patterns and reference architectures.
• Design security controls for AWS environments, with Azure as an additional plus.
• Define secure architectures around IAM, networking, encryption, containers, logging and monitoring.
• Review and challenge cloud solution architectures from a security perspective.
• Perform threat modelling and architecture risk assessments.
• Identify security gaps and define appropriate remediation measures.
• Contribute to and further develop the Cloud Security Control Framework.
• Define reusable security blueprints for cloud and cloud-native technologies.
• Support engineering teams during architecture, design and implementation.
• Embed Security by Design and Zero Trust principles across cloud initiatives.
• Collaborate with Security Risk and Security Operations teams.
• Assess the security implications of emerging cloud technologies and AI services.
• Participate in architecture governance and review boards.

Profile

• 10+ years of experience within IT / Cybersecurity.
• 5+ years of experience in Cloud Security Architecture.
• Strong hands-on expertise with AWS security architecture.
• Proven experience defining cloud security controls, patterns, guardrails and reference architectures.
• Experience with threat modelling and cloud architecture security assessments.
• Strong knowledge of:
• AWS IAM
• VPC, Transit Gateway, Security Groups & NACLs
• EKS / ECS & container security
• KMS, encryption & secrets management
• GuardDuty, Security Hub, Inspector & WAF
• Logging, monitoring & detection
• Terraform / CloudFormation
• DevSecOps & security automation
• Familiar with frameworks such as NIS2, ISO 27001, CIS and NIST CSF.
• AWS Security Specialty certification is a strong plus.
• Able to challenge architects and engineering teams while remaining pragmatic and solution-oriented.
• Fluent in English. Dutch and/or French is a plus.

What we are looking for

• We are looking for a genuine Cloud Security Architect rather than a general Enterprise Architect or GRC profile. You should be technically comfortable going deep into AWS architecture and translating security risks into concrete technical controls.