Infrastructure Security Architect – Microsoft Azure & Zero Trust

Pauwels Consulting; Sint-Gillis; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

On-call rotation

Job summary

Pauwels Consulting is seeking an Infrastructure Security Architect to design and validate IT/OT security architectures in Brussels. The role focuses on Security by Design and Zero Trust, ensuring compliance with international standards while guiding project teams and vendors.

The position is hybrid with 24/7 on-call rotation, open to permanent and freelance contractors, starting 04-01-2027 for a 5-year engagement. Strong English plus Dutch or French required.

Qualifications

• 5+ years of experience with Zero Trust and Security by Design principles.
• 5+ years of expertise in risk analysis, vulnerability management, and security assessments.
• 5+ years of experience with NIS2, ISO 27001, IEC 62443, CIS, NIST.
• 5+ years in cloud and network security in critical infrastructures (Azure).
• 5+ years with Microsoft Defender and Sentinel suite.
• 5+ years managing Microsoft Entra ID, CA, MFA, and Purview.
• 1+ years in IT/OT cybersecurity and secure architecture definition.
• Fluent in Dutch or French with professional English.

Responsibilities

• Define and validate IT/OT security architectures for robust infrastructure protection.
• Integrate Security by Design and Zero Trust into projects.
• Perform risk analyses and identify vulnerabilities in the environment.
• Monitor compliance with standards like NIS2, ISO 27001, IEC 62443, CIS, and NIST.
• Guide project teams in cybersecurity requirements and vendor evaluations.
• Contribute to cyber governance and ongoing security posture improvements.
• Participate in 24/7 on-call rotation to ensure infrastructure stability.

Skills

Zero Trust

Security by Design

Risk analysis

Vulnerability management

Technical security assessments

Cloud & network security

Microsoft Defender

Microsoft Sentinel

Microsoft Entra ID

Conditional Access

MFA

Fluent English

Dutch or French proficiency

Tools

Microsoft Defender

Microsoft Sentinel

Microsoft Entra ID

Conditional Access

MFA

Microsoft Purview

Microsoft Azure

Job description

Our client, a leading organization in the transport infrastructure sector, is looking for an Infrastructure Security Architect to define and validate IT/OT security architectures. This role focuses on integrating Security by Design and Zero Trust principles into critical projects while ensuring compliance with international cybersecurity standards.

• Define and validate IT/OT security architectures to ensure robust protection across the infrastructure.
• Integrate Security by Design and Zero Trust principles into ongoing and new projects.
• Perform risk analyses and identify technical vulnerabilities within the environment.
• Monitor compliance with standards such as NIS2, ISO 27001, IEC 62443, CIS, and NIST.
• Guide project teams in implementing cybersecurity requirements and evaluating vendor solutions for resilience.
• Contribute to cyber governance and the continuous improvement of the organizational security posture.
• Participate in a 24/7 on-call rotation to ensure infrastructure stability.

• You have 5+ years of experience with Zero Trust models and Security by Design principles.
• You possess 5+ years of expertise in risk analysis, vulnerability management, and technical security assessments.
• You bring 5+ years of experience working with compliance frameworks such as NIS2, ISO 27001, IEC 62443, CIS, and NIST.
• You have 5+ years of experience in cloud and network security within critical infrastructures, specifically focusing on Microsoft Azure.
• You possess 5+ years of experience with Microsoft Defender (XDR, Endpoint, Cloud, Identity) and Microsoft Sentinel (SIEM/SOAR).
• You bring 5+ years of experience managing Microsoft Entra ID, Conditional Access, MFA, and Microsoft Purview.
• You have 1+ years of experience in IT/OT cybersecurity and secure architecture definition.
• You're proactive and solution-oriented.
• You are fluent in Dutch or French with professional proficiency in English.

• Start date: 04-01-2027
• Duration: 5 years
• Work regime: Full-time
• Location: Brussels
• Working model: Hybrid with 24/7 on-call availability
• Contract: open to both permanent employees and freelancers