Technology Security Architect

ITS Group Benelux; Brussel Hoofdstad; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hospitalization insurance

Group insurance

Dental insurance

20 days statutory paid vacations

Job summary

ITS Group Benelux is seeking a Senior ICT Security Architect to strengthen security across critical technology and applications for Belgian energy sector clients. You will define secure architectures, embed security in the full SDLC, and translate requirements into practical standards and guardrails.

Lead threat modelling, security reviews, and CI/CD security controls while collaborating with development, platform, risk and compliance teams.

Qualifications

• 5+ years of proven experience as an ICT Security Architect.
• 5+ years implementing and managing Identity & Access Management (IAM).
• 3+ years securing Azure containers and/or Kubernetes clusters.
• 3+ years implementing and managing Secure Software Development / DevSecOps practices.
• Experience defining, implementing and enforcing security standards, procedures and guidelines.
• Proven experience in Risk Management.
• Strong knowledge of Azure Cloud Security and cloud-native architectures.
• Knowledge of API Security, CI/CD security controls, threat modelling, secure coding, software dependency security and vulnerability management.
• Dutch or French at CEFR C1 level, with CEFR B2 in the other language.

Responsibilities

• Review solution and technical designs from a security perspective.
• Perform and facilitate threat modelling and security architecture reviews.
• Provide security guidance on IAM, API security, container security, Kubernetes and Azure cloud-native architectures.
• Define and help automate security controls within CI/CD and DevSecOps processes.
• Advise teams on secure coding, software dependencies and vulnerability management.
• Support teams in identifying and mitigating technical security risks.
• Contribute to security analyses related to incidents and vulnerabilities and recommend improvements.
• Monitor cyber threats and translate them into architecture and security measures.
• Collaborate with development, platform teams, risk, compliance and external teams.

Skills

ICT Security Architect

Identity & Access Management (IAM)

Azure Cloud Security

Kubernetes security

DevSecOps

Threat modelling

Secure SDLC

Security standards

Risk Management

CEFR C1 Dutch/French

Job description

Great assignments await you with our key account clients in rich and varied environments

We are looking for a Senior Technology Security Architect to strengthen the security of business-critical technology and application environments within the Belgian energy sector.

The role focuses on defining secure architectures, embedding security throughout the full Software Development Lifecycle (SDLC) and translating security requirements into practical technical standards, controls and guardrails.

The position requires strong expertise in Security Architecture, IAM, Azure Cloud Security, Kubernetes/Container Security and DevSecOps, combined with the ability to work closely with development teams, platform teams, architects, Risk and Compliance.

The environment follows secure-by-design and security-by-default principles and operates within an ISO 27001-certified and NIS2-regulated context.

Your missions:

• Design, maintain and continuously improve secure technology and application architectures.
• Define and enforce security architecture principles, standards and guardrails.
• Embed security throughout the SDLC, from design and development to testing and deployment.
• Translate security objectives, policies and requirements into concrete technical solutions and security controls.
• Ensure that technology and application architectures follow secure-by-design and security-by-default principles.
• Support development and platform teams in identifying and mitigating technical security risks and vulnerabilities.
• Contribute to the continuous improvement of the organisation’s cyber resilience and security architecture.

Your activities:

• Review solution and technical designs from a security perspective.
• Perform and facilitate threat modelling and security architecture reviews.
• Provide security guidance regarding Identity & Access Management (IAM), API security, container security, Kubernetes and Azure cloud-native architectures.
• Define and help automate security controls within CI/CD and DevSecOps processes.
• Advise teams on secure coding, software dependencies and vulnerability management.
• Support development and platform teams in identifying and mitigating technical security risks.
• Contribute to security analyses related to incidents and technical vulnerabilities and recommend structural improvements.
• Monitor relevant technology developments, cyber threats and vulnerabilities and translate them into appropriate architecture and security measures.
• Collaborate closely with development teams, platform teams, architects, Risk, Compliance and other stakeholders, including external development teams.

You have the following skills:

MUST HAVE

• 5+ years of proven experience as an ICT Security Architect.
• 5+ years of proven experience implementing and managing Identity & Access Management (IAM) in line with company policies.
• 3+ years of proven experience securing Azure containers and/or Kubernetes clusters.
• 3+ years of proven experience implementing and managing Secure Software Development / DevSecOps practices.
• Proven experience defining, implementing and enforcing security standards, procedures and guidelines.
• Proven experience in Risk Management.
• Strong knowledge of Azure Cloud Security and cloud-native architectures.
• Knowledge of API Security, CI/CD security controls, threat modelling, secure coding, software dependency security and vulnerability management.
• Dutch or French at CEFR C1 level, combined with at least CEFR B2 level in the other language.

NICE TO HAVE

• Experience within the energy sector.
• Experience in Platform Engineering, including designing, building or managing shared technical platforms for development teams.
• 3+ years of experience translating ISMS and security policies into concrete technical solutions.
• Knowledge and practical experience with ITIL.
• 3+ years of experience working with external development teams.

Practical Information

• On-site presence: In principle, at least 2 days per week
• Additional on-site presence may occasionally be required depending on project needs, meetings, onboarding, knowledge transfer, security, continuity or other operational requirements.
• Occasional travel to other offices or third-party locations, including distribution system operators, may be required.
• Motivated exceptions to the on-site arrangements may be possible depending on the assignment, project requirements, operational feasibility and applicable internal guidelines.
• You have at least 5 years of professional experiences in IT
• If you are at least fluent in FR/ENG or NL/ENG it’s best
• You're eager to learn, motivated and curious
• Mode de poste :Hybride (site/télétravail)
• Salaire :Salary conform your experience & skills

Advantages

• Hospitalization insurance (partner/children incl.)
• Group insurance
• Dental insurance (partner/children included)
• 20 days statutory paid vacations (legal vacations cumulated for 1 year of work)
• 11 days recovery time work 38/40 per year (= annual average: 1 day per 20 days worked) if the client asks you to work 8h/day
• Representation fee net per month.
• Internet fee of € 40 per month.
• Company car with national fuel card OR Public transport reimbursed OR mobility package.
• Daily fee of 5.50€ net /day provided.
• Subscription GSM unlimited calls for Belgium (ITS subscription)
• Training plan (e-learning - certification at ITS charge)
• Being a rather small team in BE (6 in back-office), we’re very close to each of our consultants and we differentiate ourselves trying to really take care of you and make you grow with us and within our different clients.
• Regular follow-up (every 3 to 6months depending on your needs/will)
• Regular teambuilding to meet-up and have fun (every 3 months more or less)
• Flexibility and trust
• Benefits of still being part to a bigger group (ITS Group) and having access to resources and of a larger team of Experts
• Co-optation system because sharing is caring!
• 1st pre-screening on the phone to discuss about your search and conditions and our first potential opportunities matching.
• Job descriptions sent and Teams meeting fixed with us (HR and Sales) to dig into your experience and the role.
• Package proposal so we all agree beforehand.

For more than 25 years, ITS Group has been a French ESN specializing in digital transformation, employing around 1,400 employees across 8 agencies in France and 1 in Belgium.

ITS Group places its CSR commitment at the heart of its concerns by developing sustainable and responsible digital technology and by promoting the professional and personal development of its employees.