IAM & Cloud Security Architect, Microsoft Entra ID

All European Careers BENELUX; Brussel Hoofdstad; On-site; EUR 90,000 - 120,000; Full time

Job summary

All European Careers BENELUX is seeking an experienced IAM & Cloud Security Architect to lead design, implementation and operation of secure IT and cloud environments in Brussels, Belgium. The role emphasizes identity management, PKI, cloud security architectures and security-by-design principles.

Ideal candidates have extensive hands-on cyber-defence experience, team leadership, and proficiency with Microsoft Entra ID, SAML, OIDC, OAuth, and automation via IaC/CI/CD.

Qualifications

• Master's degree in Information Technology, Computer Science, Cybersecurity or related field.
• 6+ years of ICT Security experience, including at least 3 years in cyber-defence or security operations.
• 2+ years as a Team Leader or Technical Leader on major security projects.
• Strong expertise in IAM, Microsoft Entra ID, PKI and cloud security architecture.
• Hands-on experience with identity federation, IGA, RBAC, MFA, Conditional Access, SAML, OIDC and OAuth.
• Proven experience with cryptographic technologies, endpoint security and operational cybersecurity.
• Experience designing and implementing cloud security controls, WAFs and secure application publishing.
• DevSecOps, Infrastructure as Code, CI/CD, scripting and security automation.
• At least one ICT Security certification and very good English.

Responsibilities

• Design, implement and maintain secure IT, cloud and application architectures.
• Implement IAM solutions using Microsoft Entra ID, IGA, RBAC, MFA, CA.
• Configure authentication, authorization and identity federation using SAML, OIDC and OAuth.
• Manage PKI, encryption, endpoint protection and security assurance platforms.
• Perform security monitoring, log analysis, threat hunting and incident response.
• Implement cloud and application security controls including WAFs and secure exposure of internal apps.
• Develop security automation and scripting supporting IaC, CI/CD and DevSecOps practices.
• Provide Security by Design guidance and evaluate emerging technologies through PoCs.

Skills

Security architecture

Team leadership

IAM

Microsoft Entra ID

PKI

Cloud security

DevSecOps

IaC

CI/CD

Incident response

Threat hunting

English proficiency

Education

Master's degree in Information Technology, Computer Science, Cybersecurity

Job description

We are looking for an experienced IAM & Cloud Security Architect in Brussels, Belgium, with strong expertise in Identity & Access Management (IAM), Microsoft Entra ID, Public Key Infrastructure (PKI) and cloud security architectures.

You will design, implement and maintain secure IT and cloud environments, strengthen identity and access controls, and support cyber-defence operations. The role combines hands-on security engineering, security architecture, incident response and technical leadership.

This role is open for European candidates who are willing to relocate to Brussels, Belgium.

Tasks and Responsibilities:

• Design, implement and maintain secure IT, cloud and application architectures, including security configurations and technical controls.
• Implement and manage Identity & Access Management (IAM) solutions using Microsoft Entra ID, Identity Governance & Administration (IGA), Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA) and Conditional Access.
• Configure and support authentication, authorization and identity federation using SAML, OpenID Connect (OIDC) and OAuth.
• Manage PKI, encryption, endpoint protection and security assurance platforms, ensuring the security and resilience of IT infrastructure.
• Perform security monitoring, log analysis, threat hunting and incident response, investigating threats and restoring secure operations.
• Implement cloud and application security controls, including Web Application Firewalls (WAF) and secure exposure of internal applications to the internet.
• Develop security automation and scripting, supporting Infrastructure as Code (IaC), CI/CD and DevSecOps practices.
• Provide technical leadership and Security by Design guidance, contribute to security standards and evaluate emerging technologies through Proofs of Concept (PoCs).

Profile:

• Master's degree in Information Technology, Computer Science, Cybersecurity or a related field.
• 6+ years of relevant professional experience in ICT Security, including at least 3 years of hands-on cyber-defence or security operations experience.
• 2+ years of experience as a Team Leader or Technical Leader on major security-related projects.
• Strong expertise in Identity & Access Management, Microsoft Entra ID, PKI and cloud security architecture.
• Hands‑on experience with identity federation, IGA, RBAC, MFA, Conditional Access, SAML, OpenID Connect and OAuth.
• Proven experience with cryptographic technologies, endpoint security, security infrastructure and operational cybersecurity.
• Experience designing and implementing cloud security controls, Cloud/Web Application Firewalls and secure application publishing.
• Practical experience with security monitoring, log analysis, threat detection and incident response.
• Knowledge of DevSecOps, Infrastructure as Code, CI/CD, scripting and security automation.
• At least one professional ICT Security certification, together with very good written and spoken English.

Key Technologies & Skills:

IAM, Microsoft Entra ID, Identity Governance, RBAC, MFA, Conditional Access, SAML, OpenID Connect, OAuth, PKI, Cloud Security, Web Application Firewall, DevSecOps, Infrastructure as Code, Incident Response

Relocation to Brussels

We welcome European candidates willing to relocate to Brussels, Belgium.

The position requires relocation to Brussels. Candidates should be prepared to work from Brussels and collaborate with technical teams and stakeholders in an international environment.