Senior Support Engineer — Application Security Architecture for NATO with security clearance

Wlgroup; Eigenbrakel; Hybride; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Wlgroup in Belgium is looking for a senior security architect to own reference architectures, baselines and risk registers, with a hands-on approach to design review and incident handling.

You will lead threat modelling, align designs with secure-by-design patterns, and oversee deployment of server apps on Windows and Linux, plus cloud configurations in Azure and AWS. The role is hybrid, with on-site work in Braine-l'Alleud.

Qualifications

• Senior experience supporting commercial applications in a large, governed environment.
• Security architecture in practice — threat modelling, hardening, risk registers, architecture gates.
• Identity and access work: OAuth, OpenID Connect, SAML 2.0, and directory-backed identity in the cloud.
• Cloud configuration on Azure and AWS.
• Windows and Linux server application deployment, and administration of collaboration tooling.
• Strong customer relationship skills — much of the value here is in how the advice lands.

Responsabilités

• Define secure-by-design reference architectures, patterns and hardening baselines, and review new or changed service designs against them.
• Lead threat modelling for new and materially changed services, own the technical risk entries, and track mitigations to closure.
• Run proofs of concept and produce evidence-based recommendations covering cost, operational impact, lock-in and exit.
• Support deployment and operation of server applications on Windows and Linux, and integrate them with identity providers.
• Manage cloud configuration across Azure and AWS, including identity groups and roles.
• Support deployment, configuration and monitoring of AI-based tooling and its integration with existing applications.
• Handle complex third-line incidents, escalated to vendors where it is warranted, and build the knowledge base as you go.

Connaissances

Senior experience

Security architecture

Threat modelling

Identity and access management

Cloud platforms Azure/AWS

Windows/Linux server deployment

Customer relationship skills

Outils

Azure

AWS

Description du poste

Two jobs that are usually done by two people, done properly by one: keeping a portfolio of commercial applications running, and being the person who decides whether their design is safe. It is a senior post, and the security half is not decoration — you would own reference architectures, hardening baselines and the technical risk register entries that go with them.

It suits an engineer who is credible in an architecture review and still willing to open a ticket queue afterwards.

What you would be doing

• Define secure-by-design reference architectures, patterns and hardening baselines, and review new or changed service designs against them.
• Lead threat modelling for new and materially changed services, own the technical risk entries, and track mitigations to closure.
• Run proofs of concept and produce evidence-based recommendations covering cost, operational impact, lock-in and exit.
• Support deployment and operation of server applications on Windows and Linux, and integrate them with identity providers.
• Manage cloud configuration across Azure and AWS, including identity groups and roles.
• Support deployment, configuration and monitoring of AI-based tooling and its integration with existing applications.
• Handle complex third-line incidents, escalated to vendors where it is warranted, and build the knowledge base as you go.

What you would bring

• Senior experience supporting commercial applications in a large, governed environment.
• Security architecture in practice — threat modelling, hardening, risk registers, architecture gates.
• Identity and access work: OAuth, OpenID Connect, SAML 2.0, and directory-backed identity in the cloud.
• Cloud configuration on Azure and AWS.
• Windows and Linux server application deployment, and administration of collaboration tooling.
• Strong customer relationship skills — much of the value here is in how the advice lands.

The pattern is hybrid, with half the time on site in Braine-l'Alleud.