Cybersecurity Architect

Atos; Brussel Hoofdstad; On-site; EUR 70,000 - 110,000; Full time

Job summary

Atos seeks a Security Engineering consultant to assist the team in defining and implementing projects across physical security technologies, reinforcing IT and cybersecurity competencies in areas such as access control, IP CCTV, intrusion sensors and VoIP intercoms.

The role involves documenting policies, reviewing architecture, coordinating with SOC and compliance, and collaborating with service providers to achieve secure, compliant deployments.

Qualifications

• Very good knowledge of system architecture
• Security engineering including firewall, encryption, etc.
• Excellent drafting and communication skills
• Experience with complex IT environments using heterogeneous technologies and multiple providers
• Experience defining, documenting and implementing architecture and technology selections
• Experience in physical security environments is a plus

Responsibilities

• Define and document policies, procedures and security controls to improve security posture.
• Interact with IT infrastructure providers, SOC and compliance officers to gather configuration and access information.
• Review and document system and network architecture for optimization and compliance.
• Formulate and document architecture evolution proposals and assist in implementation.
• Lead analysis of network flows for segmentation, assess risks and propose mitigations.
• Review existing documentation to identify discrepancies and ensure completeness.
• Collaborate with system integrators, administrators, security technicians and enterprise architects.

Skills

System architecture

Security engineering

Drafting & communication

Education

Active Directory domain services

Network architecture design

Job description

The consultant’s main objective will be to assist the Security Engineering team in the definition and implementation of projects in the area of technical security, reinforcing the team’s competencies in the IT and cybersecurity aspects of the physical security technologies. The main areas in scope are Physical Access Control systems, Video Monitoring systems (IP CCTV), Intrusion Detection (physical sensors, alarms) and Intercom systems (Voice over IP).

The consultant will perform the following tasks:

• Define and document policies, procedures and additional security controls to help further improve the system’s security posture.
• Interact with the service providers for IT infrastructure, IT systems and endpoints, security operations center (SOC), and compliance officers, to gather information on how the various system components are configured, how they interoperate, and how they are accessed and managed.
• Review and document the system and network architecture with the objective of its optimization, implementation of best practices and compliance with various requirements defined by the system owners or derived from the standing regulations.
• Formulate and document architecture evolution proposals, follow‑up and assist in their implementation.
• Lead the analysis and definition of the network flows for network segmentation in respect of the service needs, assess introduced risks and formulate proposals for their mitigation. follow‑up and assist in their implementation.
• Review existing documentation to understand the system, to assess the completeness of the information and to identify discrepancies between documentation and the system.
• Contribute and follow up on the project with other teams and service providers (system integrators, system administrators, security technicians, enterprise architecture team, cybersecurity team).

The above list is not exhaustive. Additional tasks contributing to achieve the unit’s objectives in relation to the requested service profile may be required.

SPECIFIC KNOWLEDGE, SKILLS AND EXPERTISE

The following specific knowledge, skills and expertise are required for the performance of the above listed tasks:

Very good knowledge in:

• system architecture: definition and optimization of complex IT environments involving IT and IoT systems
• security engineering (Firewall, encryption, etc.),

Certification such as the following will be considered an asset:

• Relevant certifications in defining and administering Active Directory Domain services
• Relevant certifications in defining and implementing network architecture

Excellent drafting and communication skills

Experience with working complex IT environments using heterogenous technologies and multiple service providers

Experience with definition, documentation and practical implementation of architecture and technology selection, installation, configuration, test, operations.

Experience in specific physical security environments will be considered an asset.