Application and Cloud Security Engineer (Entra ID, Azure, AWS) for NATO with security clearance

WLG; Eigenbrakel; Hybride; EUR 90 000 - 120 000; Plein temps

Résumé du poste

WLG is seeking a senior security architect to own reference architectures, risk registers, and safe design reviews for our commercial applications. You will drive threat modelling, oversee hardening baselines, and manage cloud configurations across Azure and AWS while integrating AI tooling with existing apps.

You will work hands-on with Windows and Linux deployments and maintain strong customer relationships, ensuring clear guidance lands with teams and stakeholders.

Qualifications

• Senior security architect with practical experience in large, governed environments.
• Hands-on threat modelling, hardening baselines and risk registers.
• Expertise in OAuth, OpenID Connect and SAML 2.0 for cloud identity.
• Proficient in deploying and securing Windows and Linux servers.
• Strong advisory impact with customers and stakeholders.

Responsabilités

• Define secure-by-design reference architectures and baseline patterns.
• Lead threat modelling for new services and track mitigations to closure.
• Run PoCs and provide evidence-based recommendations on cost and risk.
• Support deployment and operation of server apps on Windows and Linux, integrated with IdP.
• Manage cloud configurations across Azure and AWS, including IAM roles.
• Support deployment, configuration and monitoring of AI tooling with existing apps.
• Handle complex 3rd-line incidents and escalate appropriately.

Connaissances

Senior enterprise app experience

Threat modelling & risk management

Identity & access management (OAuth /

Azure & AWS cloud config

Windows & Linux server deployment

Customer relationship skills

Outils

Azure

AWS

Windows Server

Linux

Description du poste

Two jobs that are usually done by two people, done properly by one: keeping a portfolio of commercial applications running, and being the person who decides whether their design is safe. It is a senior post, and the security half is not decoration — you would own reference architectures, hardening baselines and the technical risk register entries that go with them.
It suits an engineer who is credible in an architecture review and still willing to open a ticket queue afterwards.

What You Would Be Doing

• Define secure-by-design reference architectures, patterns and hardening baselines, and review new or changed service designs against them.
• Lead threat modelling for new and materially changed services, own the technical risk entries, and track mitigations to closure.
• Run proofs of concept and produce evidence-based recommendations covering cost, operational impact, lock-in and exit.
• Support deployment and operation of server applications on Windows and Linux, and integrate them with identity providers.
• Manage cloud configuration across Azure and AWS, including identity groups and roles.
• Support deployment, configuration and monitoring of AI-based tooling and its integration with existing applications.
• Handle complex third-line incidents, escal ...

What you would bring

• Senior experience supporting commercial applications in a large, governed environment.
• Security architecture in practice — threat modelling, hardening, risk registers, architecture gates.
• Identity and access work: OAuth, OpenID Connect, SAML 2.0, and directory-backed identity in the cloud.
• Cloud configuration on Azure and AWS.
• Windows and Linux server application deployment, and administration of collaboration tooling.
• Strong customer relationship skills — much of the value here is in how the advice lands.

The pattern is hybrid, with half the time on site in Braine-l'Alleud.