AWS Security Architect

As a Security Cloud Architect within the CISO Office, you will join the Security Architecture team and play a key role in securing the organisation’s cloud transformation initiatives. You will act as a technical authority on cloud security topics, providing practical guidance, reviewing architecture decisions, challenging technical designs when required, and ensuring that identified risks are appropriately addressed through security controls or formal risk acceptance processes.

The successful candidate will be a seasoned cloud security professional with strong AWS architecture expertise, capable of defining cloud security control frameworks and security patterns, reviewing and challenging solution designs, assessing risks, and partnering with engineering teams to embed Security by Design across our client in the postal and logistics sector’s cloud transformation initiatives. In the area of Cloud Security Governance, Standards & Architecture, you will define cloud security policies, standards, guardrails, design patterns and reference architectures for AWS and Azure environments; develop and maintain reusable security blueprints and architectural building blocks for AWS, Azure, and cloud-native technologies; ensure alignment with business, regulatory, and security requirements; and contribute to the continuous improvement of the cloud security control framework.

For Secure Cloud Architecture & Design, you will define security requirements for cloud platforms and services; design secure patterns for IAM, networking, encryption & key management, logging & monitoring, container and Kubernetes security, and DevSecOps; promote security by design and zero-trust principles; and provide hands-on technical expertise during design workshops, proof-of-concepts, and implementation activities. In Security Architecture Reviews & Risk Management, you will review solution designs and cloud projects; identify security risks, weaknesses, and control gaps; assess the security implications of emerging cloud technologies and AI services; conduct threat modelling exercises for cloud-based solutions to identify potential attack paths, security weaknesses, and required mitigating controls; define remediation measures and support risk acceptance processes; review and challenge security exception requests; participate in architecture governance and review boards; and collaborate with Security Risk Managers to ensure identified risks are properly documented, assessed, and tracked through the risk management process.

To Support Security Operations, you will collaborate with operational security teams to ensure security controls can be effectively monitored and operated, and improve detection, monitoring and response capabilities in the cloud. For Cloud Security Awareness & Adoption, you will promote cloud security best practices across engineering teams, increase awareness of security-by-design principles, and support teams in adopting secure cloud patterns and controls.

Your profile: 10+ years of experience in IT and cybersecurity; 5+ years of hands-on experience in cloud security architecture; proven experience defining and operating a Cloud Security Control Framework; proven experience designing cloud security patterns, blueprints and reference architectures for AWS (mandatory) and Azure (is a plus); proven experience conducting threat modelling and architecture risk assessments for cloud-based solutions; proven hands-on experience designing and securing AWS environments; experience reviewing solution architectures and performing security assessments for complex projects; strong knowledge of AWS Identity and Access Management (IAM), Network Security (VPC, Transit Gateway, Security Groups, NACLs), Container Security (EKS, ECS), Infrastructure as Code (Terraform, CloudFormation), Secrets Management and Cryptography, Logging, Monitoring, and Detection, Security Automation and DevSecOps, and AWS Security Services (GuardDuty, Security Hub, Inspector, WAF, KMS, etc.); familiarity with compliance frameworks such as NIS2, ISO 27001, CIS, and NIST CSF; AWS Security Specialty certification is highly desirable; strong communication and stakeholder management skills; fluent in English; Dutch and/or French is a plus.