Cloud Security Architect

Parallel Consulting; Brussel Hoofdstad; Sur place; EUR 90 000 - 150 000; Plein temps

Résumé du poste

Parallel Consulting is seeking a Cloud Security Architect to lead security design across AWS and Azure environments in Belgium. You will develop repeatable patterns, guardrails, and reference architectures to enable secure cloud-native deployments.

The role requires extensive experience in cloud security, threat modelling, risk assessment, and governance, with strong English communication and stakeholder engagement. Dutch/French knowledge is a plus.

Qualifications

• 10+ years across IT infrastructure, cybersecurity, or security architecture.
• 5+ years in Cloud Security Architecture with hands-on design.
• Experience applying cloud security controls frameworks.
• Strong AWS-based cloud security design experience.
• ISO 27001 / CIS Controls knowledge is a plus.

Responsabilités

• Establish and evolve cloud security standards, governance models, and reference architectures across AWS (and Azure).
• Develop repeatable architecture patterns and security blueprints for cloud-native deployments.
• Translate business and technical objectives into security requirements for cloud services.
• Architect secure cloud solutions covering IAM, network segmentation, encryption, monitoring, and DevSecOps.
• Lead threat modelling exercises and cloud-focused security assessments.

Connaissances

Cloud security architecture

AWS security

Kubernetes security

Terraform

CloudFormation

IAM

Threat modelling

Risk assessment

DevSecOps

Security monitoring

Outils

AWS

EKS

ECS

GuardDuty

Security Hub

Inspector

WAF

KMS

Terraform

CloudFormation

Description du poste

• Establish and evolve cloud security standards, governance models, reference architectures, and security guardrails across AWS and Azure environments.
• Develop repeatable architecture patterns and security blueprints to support cloud-native deployments.
• Translate business and technical objectives into security requirements for cloud services and platforms.
• Architect secure cloud solutions covering areas such as identity and access management, network segmentation, encryption, key lifecycle management, monitoring, logging, container platforms, Kubernetes, and DevSecOps practices.
• Assess solution architectures to identify vulnerabilities, security exposures, and compliance gaps.
• Lead and facilitate threat modelling exercises and cloud-focused security assessments.
• Recommend mitigation strategies and contribute to formal risk treatment and acceptance processes.
• Support architecture governance forums and technical review boards.
• Partner with security operations and engineering teams to strengthen monitoring, detection, and incident response capabilities within cloud environments.
• Advocate for secure engineering practices and drive adoption of Security-by-Design principles throughout the organisation.

Required Experience

• Minimum 10 years' experience across IT infrastructure, cybersecurity, or security architecture disciplines.
• At least 5 years specialising in Cloud Security Architecture, with hands-on design and implementation expertise.
• Demonstrated experience applying and operating cloud security control frameworks.
• Strong background designing and securing AWS-based cloud environments.
• Experience creating cloud security standards, reusable design patterns, and architectural frameworks within AWS. Exposure to Azure is beneficial.
• Proven capability conducting security risk assessments and threat modelling activities.
• Experience reviewing solution designs from a security architecture perspective and providing remediation recommendations.

Strong practical knowledge of:

• AWS Identity & Access Management (IAM)
• Cloud Network Security, including VPCs, Transit Gateway, Security Groups, and Network ACLs
• Container and Kubernetes Security, particularly EKS and ECS
• Infrastructure as Code (IaC) using Terraform and CloudFormation
• Cryptography, Encryption, and Secrets Management
• Security monitoring, logging, alerting, and detection mechanisms
• Security automation and DevSecOps tooling
• AWS-native security services including GuardDuty, Security Hub, Inspector, WAF, and KMS

Additional Requirements

• Good understanding of recognised security and compliance frameworks, including NIS2, ISO 27001, CIS Controls.
• Strong stakeholder engagement and communication skills with the ability to influence both technical and non-technical audiences.
• Fluent English communication skills, both written and verbal.
• Knowledge of Dutch and/or French would be advantageous.
• AWS Certified Security certification is highly desirable.