Cybersecurity & Solutions Architect

Key Responsibilities:

• Review IT architectures, designs, and implementations to identify security risks and recommend mitigation measures.

• Assess compliance with European Commission security standards, guidelines, and procedures.

• Conduct threat modelling, risk assessments, and business impact analyses.

• Develop and implement security policies, procedures, and IT Security Plans.

• Guide development teams throughout the SDLC to ensure secure software development.

• Conduct security inspections, code reviews, vulnerability assessments, and risk assessments.

• Design and deploy security solutions for on-premises data centres and cloud environments.

• Ensure data protection through encryption, identity management, and access controls.

• Prepare incident response plans and conduct security simulations.

• Manage security technologies such as firewalls and intrusion detection/prevention systems.

• Design secure cloud architectures focused on availability, reliability, performance, and cost optimisation.

• Implement monitoring, logging, tracing, and observability solutions.

• Support disaster recovery and business continuity planning, including RTO/RPO definition.

• Evaluate new cloud services and technologies and recommend improvements.

Essential Professional Experience:

• 15+ years of IT experience with an EQF Level 7 degree, or 17+ years with an EQF Level 6 degree.

• 10+ years of cybersecurity experience across network, application, endpoint, and cloud security.

• 8+ years integrating security into DevSecOps pipelines, including SAST, DAST, and software supply chain security.

• 10+ years in vulnerability assessment and penetration testing.

• 7+ years implementing IT solutions under regulatory requirements such as GDPR.

• 4+ years with threat intelligence platforms and threat modelling methodologies such as PASTA.

• 8+ years working with cloud platforms such as AWS, Azure, or OVH.

• 4+ years with Docker and Kubernetes.

• 4+ years with Infrastructure as Code tools such as Terraform, AWS CloudFormation, or CDK.

• 4+ years of professional experience in an International Organisation.

Technical Skills:

• Cybersecurity architecture, cloud security, and security controls.

• DevSecOps, CI/CD pipelines, GitLab, AWS CodeCommit, and Azure DevOps.

• SAST, DAST, software supply chain security, and secure SDLC.

• Vulnerability assessment and penetration testing tools: Nessus, Qualys, Burp Suite, OWASP ZAP.

• Secure coding practices in Java, Python, and JavaScript.

• OWASP Top 10 and application security.

• Encryption technologies: TLS/SSL, IPSec, AES, RSA, and PKI.

• IAM/IGA platforms such as Okta, Azure AD, and SailPoint; MFA and SSO.

• ISO/IEC 27001 and ISO/IEC 27005.

• Endpoint Detection and Response (EDR) and Network Security Monitoring (NSM).

• Cloud networking, monitoring, optimisation, and database services such as RDS and Cloud SQL.

• Python, Bash, or PowerShell scripting.

• Cloud infrastructure troubleshooting, performance optimisation, and cost management.

• Incident response, observability, and disaster recovery/BCP.

Essential Certifications:

Candidates are required to hold the following certifications or accepted equivalents:

• Microsoft Cybersecurity Architect Expert.

• AWS Cloud Practitioner.

• Azure Security Engineer Associate.

• Infrastructure as Code certification, such as Terraform Associate.

• Cloud/vendor-specific certification, such as GCP Professional Data Engineer.

• ITIL v3 or equivalent.

Language Requirements:

• English: B2 or higher.

Key Deliverables:

• Cybersecurity risk assessments.

• IT Security Plans.

• Threat models.

• Architecture and security design reviews.

• Cloud optimisation proposals.

• Observability and incident response recommendations.

• IT service continuity and disaster recovery plans.