Cloud Security Architect - AWS

As a Cloud Security Architect, you will act as a technical authority on cloud security, helping engineering and architecture teams embed Security by Design across cloud platforms and solutions.

You will define security standards and patterns, review and challenge solution architectures, assess risks and ensure appropriate security controls are implemented., * Define cloud security policies, standards, guardrails, design patterns and reference architectures.

• Develop reusable security blueprints and architectural building blocks.
• Define and continuously improve the Cloud Security Control Framework.
• Design secure cloud patterns covering IAM, networking, encryption, key management, logging, monitoring, containers, Kubernetes and DevSecOps.
• Promote Security by Design and Zero Trust principles.
• Review and challenge cloud solution architectures and technical designs.
• Conduct threat modelling and cloud architecture risk assessments.
• Identify security risks, vulnerabilities and control gaps and define appropriate remediation measures.
• Support security exception and risk acceptance processes.
• Participate in architecture governance and review boards.
• Assess the security implications of emerging cloud technologies and AI services.
• Collaborate with engineering and security operations teams to improve detection, monitoring and response capabilities.
• Promote cloud security best practices and support engineering teams in adopting secure patterns.

• 10+ years of experience in IT and Cybersecurity.
• 5+ years of hands-on Cloud Security Architecture experience.
• Strong hands-on expertise designing and securing AWS environments.
• Proven experience defining Cloud Security Control Frameworks.
• Experience creating cloud security patterns, blueprints and reference architectures.
• Strong experience with threat modelling and architecture risk assessments.
• Experience reviewing complex solution architectures from a security perspective.
• Knowledge of Azure security is an asset.
• Familiarity with NIS2, ISO 27001, CIS and NIST CSF.
• AWS Security Specialty certification is highly desirable.
• Strong communication and stakeholder management skills.
• Fluent English; Dutch and/or French is an asset.

Key Technical Skills

AWS Security * Cloud Security Architecture * AWS IAM * VPC * Transit Gateway * Security Groups * NACLs * EKS * ECS * Kubernetes Security * Terraform * CloudFormation * Infrastructure as Code * KMS * Cryptography * Secrets Management * GuardDuty * Security Hub * Inspector * WAF * Logging & Monitoring * DevSecOps * Security Automation * Threat Modelling * Zero Trust * NIS2 * ISO 27001 * NIST CSF