Security Cloud Architect - Freelance

Job description

Daily rate: 750€/850€

Context

As a Security Cloud Architect within the CISO Office, you will join the Security Architecture team and play a key role in securing the organisation's cloud transformation initiatives. You will act as a technical authority on cloud security topics, providing practical guidance, reviewing architecture decisions, challenging technical designs when required, and ensuring that identified risks are appropriately addressed through security controls or formal risk acceptance processes.

Missions

• Define cloud security policies, standards, guardrails, design patterns, and reference architectures for AWS and Azure environments.
• Develop and maintain reusable security blueprints and architectural building blocks for AWS, Azure, and cloud-native technologies.
• Ensure alignment with business, regulatory, and security requirements.
• Contribute to the continuous improvement of the cloud security control framework.
• Define security requirements for cloud platforms and services.
• Design secure patterns for IAM, networking, encryption & key management, logging & monitoring, container and Kubernetes security, and DevSecOps.
• Promote security by design and zero-trust principles.
• Provide hands-on technical expertise during design workshops, proof-of-concepts, and implementation activities.
• Review solution designs and cloud projects.
• Identify security risks, weaknesses, and control gaps.
• Assess the security implications of emerging cloud technologies and AI services.
• Conduct threat modelling exercises for cloud-based solutions to identify potential attack paths, security weaknesses, and required mitigating controls.
• Define remediation measures and support risk acceptance processes.
• Review and challenge security exception requests.
• Participate in architecture governance and review boards.
• Collaborate with Security Risk Managers to ensure identified risks are properly documented, assessed, and tracked through the risk management process.
• Collaborate with operational security teams to ensure security controls can be effectively monitored and operated.
• Improve detection, monitoring, and response capabilities in the cloud.
• Promote cloud security best practices across engineering teams.
• Increase awareness of security-by-design principles.
• Support teams in adopting secure cloud patterns and controls.

Tools & Environment

• AWS and Azure cloud platforms
• AWS Identity and Access Management (IAM)
• Network Security (VPC, Transit Gateway, Security Groups, NACLs)
• Container Security (EKS, ECS)
• Infrastructure as Code (Terraform, CloudFormation)
• Secrets Management and Cryptography
• Logging, Monitoring, and Detection tools
• Security Automation and DevSecOps practices
• AWS Security Services (GuardDuty, Security Hub, Inspector, WAF, KMS, etc.)
• Compliance frameworks such as NIS2, ISO 27001, CIS, and NIST CSF

Working Conditions

• Position within the CISO Office, Security Architecture team
• Focus on cloud transformation initiatives
• Collaboration with multiple stakeholders including engineering teams and Security Risk Managers
• Fluent English required; Dutch and/or French is a plus

Requirements

1. 10+ years of experience in IT and cybersecurity
2. 5+ years of hands-on experience in cloud security architecture
3. Proven experience defining and operating a Cloud Security Control Framework
4. Proven experience designing cloud security patterns, blueprints and reference architectures for AWS (mandatory) and Azure (a plus)
5. Proven experience conducting threat modelling and architecture risk assessments for cloud-based solutions
6. Proven hands-on experience designing and securing AWS environments
7. Experience reviewing solution architectures and performing security assessments for complex projects
8. Strong knowledge of AWS Identity and Access Management (IAM)
9. Strong knowledge of Network Security (VPC, Transit Gateway, Security Groups, NACLs)
10. Strong knowledge of Container Security (EKS, ECS)
11. Strong knowledge of Infrastructure as Code (Terraform, CloudFormation)
12. Strong knowledge of Secrets Management and Cryptography
13. Strong knowledge of Logging, Monitoring, and Detection
14. Strong knowledge of Security Automation and DevSecOps
15. Strong knowledge of AWS Security Services (GuardDuty, Security Hub, Inspector, WAF, KMS, etc.)
16. Familiarity with compliance frameworks such as NIS2, ISO 27001, CIS, and NIST CSF
17. AWS Security Specialty certification is highly desirable
18. Strong communication and stakeholder management skills
19. Fluent in English; knowledge of Dutch and/or French is a plus