Infrastructure Security Engineer

Sander; Brussel; Hybrid; EUR 75,000 - 100,000; Full time

Job summary

Sander in Belgium seeks a Security Infrastructure Engineer to lead the evolution of the IT security landscape. You will own the security environment, define roadmaps, and collaborate with IT and business teams to deliver practical security solutions.

Reporting to IT leadership, you will shape security standards, manage IAM (Entra ID, MFA, SAML, OAuth2/OIDC), cloud security (Azure/AWS), SIEM, and incident response, while driving continuous improvement and digital resilience.

Qualifications

• 5+ years of experience in IT Security with strong infrastructure and identity security.
• Hands-on with IAM including Entra ID, MFA, SAML, OAuth2/OIDC, and PAM.
• Knowledge of Cloud (Azure/AWS), networks, and application security.
• Experience with SIEM, security monitoring and vulnerability management.
• Strong ownership mindset and clear communication.

Responsibilities

• Define security standards and roadmap and translate principles into practical solutions.
• Own IAM and access management including Entra ID, MFA, SAML, OAuth2/OIDC and PAM.
• Strengthen cloud and infrastructure security across Azure/AWS.
• Develop SIEM capabilities, detection rules, and vulnerability management processes.
• Coordinate security incidents, penetration tests, recovery exercises and remediation plans.
• Drive continuous security improvements with IT, Digital Operations and Risk teams.

Skills

IAM & Access Management

Cloud Security

SIEM & Monitoring

Incident Response

Security Architecture

Communication

Dutch language

English language

Netwrix

Tools

Netwrix

Job description

Our partner, an established Belgian company operating in a highly regulated environment, is looking for a Security Infrastructure Engineer to take a leading role in strengthening and developing its IT security landscape.

This is an opportunity to go beyond maintaining existing security systems. You will take ownership of the technical security environment, influence the security roadmap and work closely with IT and business stakeholders to turn security requirements into concrete solutions.

Reporting directly to the IT leadership, you will have the autonomy to drive improvements and make a real impact on the organisation's digital resilience.

Security Infrastructure Engineer - The Opportunity

• Security Architecture: define security standards, shape the roadmap and turn security principles into practical solutions.
• IAM & Access Management: take ownership of Entra ID, MFA, SAML, OAuth2/OIDC, Conditional Access and PAM.
• Cloud & Infrastructure Security: strengthen security across Azure/AWS, networks, applications and IT infrastructure.
• Security Monitoring: develop SIEM capabilities, detection rules and vulnerability management processes.
• Incident & Resilience Management: coordinate security incidents, penetration tests, recovery exercises and remediation plans.
• Security Leadership: work closely with IT, Digital Operations and Risk teams to drive continuous security improvements.

Security Infrastructure Engineer - The Profile

• 5+ years of experience in IT Security, with strong infrastructure and identity security expertise.
• Strong knowledge of IAM, including Entra ID, SAML, OAuth2/OIDC, MFA and PAM. Netwrix is a plus.
• Broad expertise in Cloud (Azure/AWS), Network, Application and Infrastructure Security.
• Hands-on experience with SIEM, security monitoring and vulnerability management.
• A strategic yet hands-on mindset, with strong ownership and communication skills.
• Fluent in Dutch and English; French is a plus.

Security Infrastructure Engineer - The Offer

• Ownership: take the lead on the organisation's security architecture.
• Impact: directly influence security strategy and technical decisions.
• Autonomy: freedom to take initiative and drive your own projects.
• Growth: dedicated training budget and certification opportunities.
• Package: competitive salary and additional benefits.
• Flexibility: hybrid working and remote work possibilities, with an on-call rotation for critical incidents.