IT Tribe Architect - Identity & Access Management

BNP Paribas Fortis; Brussel; Sur place; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Meal vouchers

Insurance

Holidays

Salary conversion options

Résumé du poste

BNP Paribas Fortis's Architecture Department drives our digital transformation by designing secure, scalable IAM solutions and aligning business goals with cutting-edge IT. We create architecture that bridges security, agility and customer-centric innovation across cloud and core banking.

Join as IAM Architect to own IAM design, governance and risk controls, mentor peers, and ensure compliance with GDPR and other regulations.

Qualifications

• Deep expertise in IAM architectures aligned with security policies and compliance (GDPR, NIS2).
• Secure, scalable IAM solutions integrating with cloud and legacy systems.
• Mentor to architects and security teams on IAM concepts and best practices.
• Bridge IAM requirements with business needs across stakeholders.

Responsabilités

• Define and own IAM design across systems and platforms.
• Produce and maintain architecture deliverables and reference architectures.
• Mentor and collaborate with security teams and project stakeholders.
• Ensure IAM architectures comply with internal policies and external regulations.

Connaissances

IAM Architecture Design

Security-First Integration

Risk and Compliance Awareness

Cross-Domain Collaboration

English Fluency

IAM Security - ISVA

Authentication & Encryption

Security-First Mindset

Outils

ISVA (IBM Security Verify Access)

API Gateways

WAF

Description du poste

The Architecture Department at BNP Paribas Fortis is the strategic backbone of our digital transformation.

We design the future of banking by shaping secure, scalable, and innovative technology solutions that align business vision with cutting-edge IT. Our team of expert architects bridges the gap between security, agility, and customer-centric innovation, ensuring every system-from cloud to core banking-is built for performance, compliance, and seamless integration.

AND IN DETAIL

• Define and own IAM Solutions: You will lead the design, validation, and technical ownership of Identity & Access Management (IAM) solutions, whether for new implementations or evolutions of existing systems. You will ensure alignment with enterprise security policies, regulatory requirements, and business needs.
• Produce and Maintain Architecture Documentation: You will create and update high-quality architecture deliverables, including blueprints, solution architecture and reference architecture documents.
• Support and Mentor Other Architects: You will serve as the go-to IAM subject-matter expert, providing technical guidance, best practices, and mentorship to fellow architects, security teams, and project stakeholders. You will help clarify complex IAM concepts (e.g., federation, attribute-based access control, identity lifecycle management) and ensure solutions are secure, scalable, and user-friendly.
• Ensure Compliance and Mitigate Risks: You will guarantee that IAM architectures comply with internal policies and external regulations, collaborating with risk and compliance teams to address audit findings and mitigate.

YOUR TALENTS AND COMPETENCES

• IAM Architecture Design: Deep expertise in designing and optimizing Identity & Access Management (IAM) frameworks, including authentication, authorization, and identity lifecycle management, aligned with enterprise security policies and compliance (e.g., GDPR, NIS2).
• Security-First Integration: Ability to architect secure, scalable IAM solutions that integrate seamlessly with enterprise systems (e.g., cloud platforms, legacy applications), leveraging zero-trust principles, federation protocols (SAML, OAuth2, OpenID Connect)
• Risk and Compliance Awareness: Strong understanding of IT security and cybersecurity risks (e.g., identity threats, credential abuse) and how to mitigate them through architectural controls, auditing, and least-privilege access models.
• Cross-Domain Collaboration: Proven ability to bridge technical IAM requirements with business needs, working closely with security teams, other Architects and stakeholders to ensure robust, user-friendly, and future-proof solutions
• You express yourself fluently in English, both orally and in writing, and have a basic knowledge of Dutch or French
• Identity & Access Management (IAM) Security: Expertise in ISVA (IBM Security Verify Access), API Gateways and WAF.
• Authentication & Encryption: Strong knowledge of oAuth2, TLS, and related security protocols.
• Security-First Mindset: Proven ability to integrate security as a foundational element in enterprise architecture.

WHAT WE HAVE TO OFFER

SUSTAINABILITY AND IMPACT

We strongly believe in the positive impact that the financial sector can have on the world. BNP Paribas Fortis offers sustainable and responsible investment products and solutions and encourages social entrepreneurship. Together with our customers, we are working towards a better future every day.

DEVELOPMENT & CAREER PERSPECTIVES

The departments that make up BNP Paribas Fortis cover a wide range of activities. You will therefore have many opportunities for “horizontal” and “vertical” career development.

GOOD PLACE TO WORK

In addition to your remuneration and benefits (meal vouchers, insurance, holidays), we offer flexible salary options, allowing you to convert part of your salary into personalised benefits (phone use, IT equipment, transport, etc.).

OUR ENGAGEMENT

At BNP Paribas Fortis, we want to attract and retain all talent, whatever their gender, age, background or sexual orientation, and irrespective of whether they are living with a disability, as every person has their own experiences and their own identity. All of our full-time vacancies are also open to candidates wishing to work on an 80% or 90% full-time equivalent basis.

If the function is categorized as a banking services provider function (cf. Law of 22 April 2019 establishing an oath and a disciplinary regime for the banking sector), you will also need to provide us with a 'certificate of absence of professional ban' from the FSMA confirming that you are not professionally disqualified.