Enterprise Architect

VASS BENELUX; Brussel Hoofdstad; On-site; EUR 90,000 - 120,000; Full time

Job summary

VASS BeNeLux seeks an Enterprise Architect to deliver large IT programs for the European Commission, focusing on security, DevSecOps, cloud, and governance.

You will coordinate cross-functional teams, contractors, and stakeholders, ensure DG TAXUD compliance, and guide architectural decisions and risk management.

Extensive experience with CI/CD pipelines, containers, AWS, and security tooling (Jenkins, Kubernetes, Elastic stack) is required.

Qualifications

• Minimum 10 years IT experience.
• 5+ years in IT Security and 3+ years in DevSecOps, Containers, CI/CD security integration, and S-SDLC.
• Experience with ISO 27001, NIST, COBIT, COSO, GDPR and regulatory requirements.
• Hands-on cryptography, network security, IAM, key management, firewalls, IDS/IPS and encryption tech.
• Experience in software development (Java asset) and reviewing security docs.
• Strong knowledge of incident response, cloud security in AWS, and governance.

Responsibilities

• Manage projects through full lifecycle with timely delivery, quality standards, and resource management.
• Coordinate project teams, contractors, business stakeholders, and Member States representatives.
• Monitor progress, risks, issues, changes, and provide reporting and escalation.
• Ensure DG TAXUD methodologies, governance, procedures, security policies, and architecture standards.
• Review, assess, and recommend technical solutions and contractor deliverables.
• Support system integration, interoperability, and alignment with enterprise architecture.
• Produce, review, and maintain project, technical, and governance documentation.
• Support, administer, and improve DevSecOps, CI/CD, containerization, cloud, and ALM platforms.
• Manage tools such as Jira, Confluence, Jenkins, Nexus, SonarQube, Bitbucket, Kubernetes, Tanzu, and AWS.
• Promote DevSecOps practices, automation, continuous delivery, and secure software development.
• Conduct security assessments, risk analysis, vulnerability management, and compliance monitoring.
• Integrate security requirements into solution design, implementation, operations, and cloud environments.
• Support incident response, business continuity, disaster recovery, and information security governance.
• Contribute to architecture strategy, technology evolution, and service improvement initiatives.
• Support DG TAXUD Digital Shared Services including eArchiving, Kafka/Confluent, Elastic Stack, Tanzu, Jenkins/Nexus, Bitbucket.

Skills

IT governance

DevSecOps

Security management

Cloud security

Agile methods

Tools

Jira

Confluence

Jenkins

Nexus

SonarQube

Bitbucket

Kubernetes

Tanzu

AWS

Elastic Stack

Splunk

Dynatrace

Fortify

Job description

VASS BeNeLux is currently seeking an Enterprise Architect to work for the European Commission.

The role:

• Manage projects throughout their full lifecycle, ensuring timely delivery, quality standards, and effective resource management.
• Coordinate project teams, contractors, business stakeholders, and Member States representatives.
• Monitor project progress, risks, issues, changes, and provide regular reporting and escalation when needed.
• Ensure compliance with DG TAXUD methodologies, governance, procedures, security policies, and architecture standards.
• Review, assess, and recommend technical solutions, technologies, and contractor deliverables.
• Support system integration, interoperability, and alignment with enterprise architecture.
• Produce, review, and maintain project, technical, and governance documentation.
• Support, administer, and improve DevSecOps, CI/CD, containerization, cloud, and ALM platforms.
• Manage and support tools such as Jira, Confluence, Jenkins, Nexus, SonarQube, Bitbucket, Kubernetes, Tanzu, and AWS.
• Promote DevSecOps best practices, automation, continuous delivery, and secure software development.
• Conduct security assessments, risk analysis, vulnerability management, and compliance monitoring.
• Integrate security requirements into solution design, implementation, operations, and cloud environments.
• Support incident response, business continuity, disaster recovery, and information security governance.
• Contribute to architecture strategy, technology evolution, and service improvement initiatives.
• Support and enhance DG TAXUD Digital Shared Services, including eArchiving, Kafka/Confluent, Elastic Stack, Tanzu, Jenkins/Nexus, and Bitbucket.

Specific Expertise:

• Minimum 10 years of IT experience, including 5+ years in IT Security and 3+ years in DevSecOps, Containers, CI/CD security integration, and Secure SDLC (S-SDLC).
• Strong expertise in security management, security assessments, vulnerability management, penetration testing, risk management, and security audits.
• Experience with security frameworks and standards such as ISO 27001, NIST, COBIT, COSO, GDPR, and other regulatory requirements.
• Hands‑on experience with cryptography, network security, IAM, key management, firewalls, IDS/IPS, encryption technologies, and security operations tools.
• Experience in software development (Java is an asset) and reviewing technical and security documentation.
• Strong knowledge of incident response, business continuity, and cloud security, particularly in AWS environments.
• Proven experience administering IT systems (including Linux), developing scripts (e.g., Groovy), and managing REST‑based services.
• Expertise in designing, implementing, and maintaining DevSecOps and CI/CD pipelines using tools such as Jenkins and GitLab.
• Experience with monitoring and observability solutions such as Elastic Stack, Splunk, and Dynatrace.
• Expertise in SAST (e.g., Fortify), SCA (e.g., Sonatype Lifecycle), Containers, Kubernetes, and cloud-native technologies.
• Ability to define, implement, and maintain security strategies, policies, controls, and governance frameworks.
• Experience with Apache Kafka/Confluent, Elastic Stack, Tanzu, Nutanix, and eArchiving solutions is considered an asset.
• Strong documentation skills using Confluence or similar collaboration tools.
• Knowledge of Agile, Lean SDLC, ITIL, TOGAF, and PM² methodologies is an advantage.
• Relevant certifications such as CISSP, CCSP, CISM, CISA, CEH, AWS Security Specialty, Security+, ITIL, Agile, TOGAF, or PM² are considered assets.