Security Architect

A Flemish government institution supports the planning, management and improvement of critical public infrastructure in Flanders. In doing so, the organisation is digitalising processes, services and operational platforms within a complex and interconnected landscape.

As an experienced Security Architect, you strengthen secure-by-design decision-making within this landscape. You translate security policy and risk requirements into practical architecture principles, reference patterns and design-oriented guidelines for applications, integrations, platforms and cloud or hybrid environments.

• Defining, maintaining and promoting security architecture principles, standards and reusable reference patterns.
• Assessing designs for applications, APIs, integrations, platforms, and cloud and hybrid solutions against security requirements and architectural good practices.
• Translating policy, risk and compliance requirements into practical architecture guidelines and design decisions.
• Advising on identity and access management, authentication, authorisation, secrets and key management, encryption, logging, monitoring and auditability.
• Supporting threat modelling, architecture risk assessments and secure-by-design decision-making throughout project and product lifecycles.
• Guiding teams on secure integration patterns, zero-trust principles, segmentation and security controls for modern distributed environments.
• Contributing to the development of the security target architecture within cloud and hybrid platforms.
• Identifying structural security risks, design weaknesses and recurring shortcomings, and escalating them to the appropriate governance bodies and stakeholders.
• Collaborating with architects, engineering teams and security stakeholders to improve the consistency, scalability and maintainability of security design decisions.
• Contributing to architecture governance by providing clear security input for projects, roadmaps and major changes.

You work closely with enterprise and solution architects, development teams, platform teams and other relevant stakeholders within the organisation. Your role is functionally aligned with the information security function: you support the translation of security requirements into architecture and design.

The CISO or person responsible for information security remains accountable for policy, control frameworks, risk governance and formal risk acceptance. You translate those requirements into architecture standards, design guidelines and solution-oriented recommendations, and escalate structural risks or recurring control shortcomings to the CISO where necessary.