Technology Security Architect

Vos missions

Great assignments await you with our key account clients in rich and varied environments

We are looking for a Senior Technology Security Architect to strengthen the security of business-critical technology and application environments within the Belgian energy sector.

The role focuses on defining secure architectures, embedding security throughout the full Software Development Lifecycle (SDLC) and translating security requirements into practical technical standards, controls and guardrails.

The position requires strong expertise in Security Architecture, IAM, Azure Cloud Security, Kubernetes/Container Security and DevSecOps, combined with the ability to work closely with development teams, platform teams, architects, Risk and Compliance.

The environment follows secure-by-design and security-by-default principles and operates within an ISO 27001-certified and NIS2-regulated context.

Your missions:

• Design, maintain and continuously improve secure technology and application architectures.
• Define and enforce security architecture principles, standards and guardrails.
• Embed security throughout the SDLC, from design and development to testing and deployment.
• Translate security objectives, policies and requirements into concrete technical solutions and security controls.
• Ensure that technology and application architectures follow secure-by-design and security-by-default principles.
• Support development and platform teams in identifying and mitigating technical security risks and vulnerabilities.
• Contribute to the continuous improvement of the organisation’s cyber resilience and security architecture.

Your activities:

• Review solution and technical designs from a security perspective.
• Perform and facilitate threat modelling and security architecture reviews.
• Provide security guidance regarding Identity & Access Management (IAM), API security, container security, Kubernetes and Azure cloud-native architectures.
• Define and help automate security controls within CI/CD and DevSecOps processes.
• Advise teams on secure coding, software dependencies and vulnerability management.
• Support development and platform teams in identifying and mitigating technical security risks.
• Contribute to security analyses related to incidents and technical vulnerabilities and recommend structural improvements.
• Monitor relevant technology developments, cyber threats and vulnerabilities and translate them into appropriate architecture and security measures.
• Collaborate closely with development teams, platform teams, architects, Risk, Compliance and other stakeholders, including external development teams.

You have the following skills:

MUST HAVE

• 5+ years of proven experience as an ICT Security Architect.
• 5+ years of proven experience implementing and managing Identity & Access Management (IAM) in line with company policies.
• 3+ years of proven experience securing Azure containers and/or Kubernetes clusters.
• 3+ years of proven experience implementing and managing Secure Software Development / DevSecOps practices.
• Proven experience defining, implementing and enforcing security standards, procedures and guidelines.
• Proven experience in Risk Management.
• Strong knowledge of Azure Cloud Security and cloud-native architectures.
• Knowledge of API Security, CI/CD security controls, threat modelling, secure coding, software dependency security and vulnerability management.
• Dutch or French at CEFR C1 level, combined with at least CEFR B2 level in the other language.

NICE TO HAVE

• Experience within the energy sector.
• Experience in Platform Engineering, including designing, building or managing shared technical platforms for development teams.
• 3+ years of experience translating ISMS and security policies into concrete technical solutions.
• Knowledge and practical experience with ITIL.
• 3+ years of experience working with external development teams.

Practical Information

• On-site presence: In principle, at least 2 days per week
• Additional on-site presence may occasionally be required depending on project needs, meetings, onboarding, knowledge transfer, security, continuity or other operational requirements.
• Occasional travel to other offices or third-party locations, including distribution system operators, may be required.
• Motivated exceptions to the on-site arrangements may be possible depending on the assignment, project requirements, operational feasibility and applicable internal guidelines.

Votre profil

• • You have at least 5 years of professional experiences in IT
  • If you are at least fluent in FR/ENG or NL/ENG it’s best
  • You’re eager to learn, motivated and curious
  • Let’s have a chat !

Advantages

• Hospitalization insurance (partner/children incl.)
• Group insurance
• Dental insurance (partner/children included)
• 20 days statutory paid vacations (legal vacations cumulated for 1 year of work)
• 11 days recovery time work 38/40 per year (= annual average: 1 day per 20 days worked) if the client asks you to work 8h/day
• Representation fee net per month.
• Internet fee of € 40 per month.
• Company car with national fuel card OR Public transport reimbursed OR mobility package.
• Daily fee of 5.50€ net /day provided.
• Subscription GSM unlimited calls for Belgium (ITS subscription)
• Training plan (e-learning - certification at ITS charge)

Extra advantages:

• Being a rather small team in BE (6 in back-office), we’re very close to each of our consultants and we differentiate ourselves trying to really take care of you and make you grow with us and within our different clients.
• Regular follow-up (every 3 to 6months depending on your needs/will)
• Regular teambuilding to meet-up and have fun (every 3 months more or less)
• Flexibility and trust
• Benefits of still being part to a bigger group (ITS Group) and having access to resources and of a larger team of Experts
• Co-optation system because sharing is caring!

Processus de recrutement

• 1st pre-screening on the phone to discuss about your search and conditions and our first potential opportunities matching.
• Job descriptions sent and Teams meeting fixed with us (HR and Sales) to dig into your experience and the role.
• Package proposal so we all agree beforehand.
• Your CV is sent to the different clients you’ve agreed to, to find the best mission for you!