IT Tribe Architect - Identity & Access Management - HQ Brussels

• Define and own IAM Solutions: You will lead the design, validation, and technical ownership of Identity & Access Management (IAM) solutions, whether for new implementations or evolutions of existing systems. You will ensure alignment with enterprise security policies, regulatory requirements, and business needs.
• Produce and Maintain Architecture Documentation: You will create and update high-quality architecture deliverables, including blueprints, solution architecture and reference architecture documents.
• Support and Mentor Other Architects: You will serve as the go-to IAM subject-matter expert, providing technical guidance, best practices, and mentorship to fellow architects, security teams, and project stakeholders. You will help clarify complex IAM concepts (e.g., federation, attribute-based access control, identity lifecycle management) and ensure solutions are secure, scalable, and user-friendly.
• Ensure Compliance and Mitigate Risks: You will guarantee that IAM architectures comply with internal policies and external regulations, collaborating with risk and compliance teams to address audit findings and mitigate.

• IAM Architecture Design: Deep expertise in designing and optimizing Identity & Access Management (IAM) frameworks, including authentication, authorization, and identity lifecycle management, aligned with enterprise security policies and compliance (e.g., GDPR, NIS2).
• Security-First Integration: Ability to architect secure, scalable IAM solutions that integrate seamlessly with enterprise systems (e.g., cloud platforms, legacy applications), leveraging zero-trust principles, federation protocols (SAML, OAuth2, OpenID Connect)
• Risk and Compliance Awareness: Strong understanding of IT security and cybersecurity risks (e.g., identity threats, credential abuse) and how to mitigate them through architectural controls, auditing, and least-privilege access models.
• Cross-Domain Collaboration: Proven ability to bridge technical IAM requirements with business needs, working closely with security teams, other Architects and stakeholders to ensure robust, user-friendly, and future-proof solutions
• You express yourself fluently in English, both orally and in writing, and have a basic knowledge of Dutch or French
• Identity & Access Management (IAM) Security: Expertise in ISVA (IBM Security Verify Access), API Gateways and WAF.
• Authentication & Encryption: Strong knowledge of oAuth2, TLS, and related security protocols.
• Security-First Mindset: Proven ability to integrate security as a foundational element in enterprise architecture.

The Architecture Department at BNP Paribas Fortis is the strategic backbone of our digital transformation.

We design the future of banking by shaping secure, scalable, and innovative technology solutions that align business vision with cutting-edge IT. Our team of expert architects bridges the gap between security, agility, and customer-centric innovation, ensuring every system-from cloud to core banking-is built for performance, compliance, and seamless integration., We strongly believe in the positive impact that the financial sector can have on the world. BNP Paribas Fortis offers sustainable and responsible investment products and solutions and encourages social entrepreneurship. Together with our customers, we are working towards a better future every day., The departments that make up BNP Paribas Fortis cover a wide range of activities. You will therefore have many opportunities for “horizontal” and “vertical” career development., At BNP Paribas Fortis, we want to attract and retain all talent, whatever their gender, age, background or sexual orientation, and irrespective of whether they are living with a disability, as every person has their own experiences and their own identity. All of our full-time vacancies are also open to candidates wishing to work on an 80% or 90% full-time equivalent basis.

If the function is categorized as a banking services provider function (cf. Law of 22 April 2019 establishing an oath and a disciplinary regime for the banking sector), you will also need to provide us with a ‘certificate of absence of professional ban’ from the FSMA confirming that you are not professionally disqualified.