Infrastructure Security Architect – Microsoft Azure & Zero Trust

Pauwels Consulting; Brussel Hoofdstad; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

On-call rotation 24/7

Job summary

Pauwels Consulting is seeking an Infrastructure Security Architect in Brussels to define and validate IT/OT security architectures across critical infrastructure projects. You will drive Security by Design and Zero Trust implementations while ensuring alignment with international standards.

You will perform risk analyses, identify vulnerabilities, and guide project teams on cybersecurity requirements and vendor assessments, with a 24/7 on-call rotation and a hybrid work model in Brussels.

Qualifications

• 5+ years of experience with Zero Trust models and Security by Design principles.
• 5+ years of experience in risk analysis, vulnerability management, and technical security assessments.
• 5+ years of experience with compliance frameworks (NIS2, ISO27001, IEC62443, CIS, NIST).
• 5+ years of cloud and network security experience in critical infrastructure, especially Azure.
• 5+ years of experience with Microsoft Defender (XDR/Endpoint/Cloud/Identity) and Microsoft Sentinel.
• 5+ years managing Microsoft Entra ID, Conditional Access, MFA, and Purview.
• 1+ years in IT/OT cybersecurity and secure architecture definition.
• Fluent in Dutch or French with professional English proficiency.

Responsibilities

• Define and validate IT/OT security architectures to protect the infrastructure.
• Integrate Security by Design and Zero Trust into ongoing and new projects.
• Perform risk analyses and identify technical vulnerabilities.
• Monitor compliance with standards (NIS2, ISO 27001, IEC 62443, CIS, NIST).
• Guide project teams in cybersecurity requirements and vendor solutions for resilience.
• Contribute to cyber governance and continuous improvement of security posture.
• Participate in a 24/7 on-call rotation.

Skills

Zero Trust models

Security by Design

Risk analysis

Vulnerability management

Technical security assessments

Compliance frameworks (NIS2 ISO 27001/

Cloud security (Azure)

Microsoft Defender & Sentinel

Microsoft Entra ID & CA & MFA & Purvue

IT/OT cybersecurity

Dutch or French proficiency; English

Job description

Our client, a leading organization in the transport infrastructure sector, is looking for an Infrastructure Security Architect to define and validate IT/OT security architectures. This role focuses on integrating Security by Design and Zero Trust principles into critical projects while ensuring compliance with international cybersecurity standards.

Responsibilities

• Define and validate IT/OT security architectures to ensure robust protection across the infrastructure.
• Integrate Security by Design and Zero Trust principles into ongoing and new projects.
• Perform risk analyses and identify technical vulnerabilities within the environment.
• Monitor compliance with standards such as NIS2, ISO 27001, IEC 62443, CIS, and NIST.
• Guide project teams in implementing cybersecurity requirements and evaluating vendor solutions for resilience.
• Contribute to cyber governance and the continuous improvement of the organizational security posture.
• Participate in a 24/7 on-call rotation to ensure infrastructure stability.

Requirements

• You have 5+ years of experience with Zero Trust models and Security by Design principles.
• You possess 5+ years of expertise in risk analysis, vulnerability management, and technical security assessments.
• You bring 5+ years of experience working with compliance frameworks such as NIS2, ISO 27001, IEC 62443, CIS, and NIST.
• You have 5+ years of experience in cloud and network security within critical infrastructures, specifically focusing on Microsoft Azure.
• You possess 5+ years of experience with Microsoft Defender (XDR, Endpoint, Cloud, Identity) and Microsoft Sentinel (SIEM/SOAR).
• You bring 5+ years of experience managing Microsoft Entra ID, Conditional Access, MFA, and Microsoft Purview.
• You have 1+ years of experience in IT/OT cybersecurity and secure architecture definition.
• You're proactive and solution-oriented.
• You are fluent in Dutch or French with professional proficiency in English.

Offer

• Start date: 04-01-2027
• Duration: 5 years
• Work regime: Full-time
• Location: Brussels
• Working model: Hybrid with 24/7 on-call availability
• Contract: open to both permanent employees and freelancers