Our client is a major international organisation active in logistics, parcel delivery, e-commerce services and digital solutions.

As part of its ongoing Cloud and cybersecurity transformation, the organisation is strengthening the security architecture of its AWS environment. The objective is to establish a consistent, scalable and secure Cloud framework that can support current and future digital initiatives.
The organisation is therefore looking for a senior AWS Security Architect who can define the architectural direction, security principles and reusable standards governing AWS environments.

Role Overview

As an AWS Security Architect, you will be responsible for designing and guiding the organisation’s AWS Security Architecture.
You will define the target security architecture, reference patterns and technical standards that will be implemented by Cloud, infrastructure, DevOps and DevSecOps teams.
This is not a purely governance-focused or documentation-based position. You must be technically credible, understand how AWS security controls are implemented and remain involved throughout the delivery lifecycle.
You will work closely with AWS engineers, security specialists, infrastructure teams, solution architects and project stakeholders to ensure that security requirements are translated into concrete, implementable and sustainable solutions.

Key Responsibilities

• Define and maintain the AWS Security Architecture, including target models, principles, standards and reference architectures.
• Design reusable AWS security patterns for identity, networking, monitoring, encryption, vulnerability management, backups and resilience.
• Translate cybersecurity, risk and regulatory requirements into concrete technical and architectural controls.
• Review Cloud and application architectures and identify potential security weaknesses, design risks and control gaps.
• Guide AWS, infrastructure, DevOps and DevSecOps teams during the implementation of security controls.
• Ensure that architectural decisions are technically realistic, operationally sustainable and financially appropriate.
• Define security requirements for new AWS workloads, platforms and Cloud services.
• Establish standards related to AWS Identity and Access Management, privileged access and least-privilege principles.
• Define secure approaches for encryption, key management, secrets management and data protection.
• Contribute to vulnerability management, patching and remediation strategies within AWS environments.
• Design logging, monitoring, alerting and threat-detection architectures.
• Define security requirements related to backup, recovery, availability and business continuity.
• Review implemented solutions and verify that they remain aligned with the approved architecture.
• Document architectural decisions, standards, exceptions and implementation guidance.
• Support the development of a consistent Cloud Security governance model across different teams and projects.
• Communicate security risks and architectural decisions to both technical and non-technical stakeholders.

Technical Environment

The environment includes AWS-native Cloud and security services covering areas such as:

• AWS Identity and Access Management.
• Privileged access and permission management.
• AWS Security Hub.
• Amazon GuardDuty.
• Logging, monitoring and threat detection.
• Network security and segmentation.
• Encryption and key management.
• Secrets management.
• Vulnerability and patch management.
• Backup and disaster recovery.
• Infrastructure automation and secure deployment.
• Cloud Security posture management.
• Security controls supporting regulatory compliance.

The candidate is not expected to know only a specific list of AWS services. The most important requirement is the ability to understand how AWS security capabilities must be combined into a coherent and scalable architecture.

Required Profile

• Significant professional experience in AWS Cloud Architecture.
• Strong and demonstrable experience in AWS Security Architecture.
• Previous ownership of architectural decisions, standards, target models or reference architectures.
• Solid understanding of AWS identity, network, infrastructure and data security.
• Strong knowledge of Identity and Access Management, including privileged access and least-privilege principles.
• Experience with vulnerability management, patch management and remediation processes in Cloud environments.
• Experience designing security monitoring, logging and threat-detection capabilities.
• Good knowledge of encryption, key management and secrets management.
• Experience with backup, recovery, resilience and business-continuity requirements.
• Ability to translate risk, compliance and governance requirements into technical controls.
• Experience working with DevOps, DevSecOps, Cloud Engineering or infrastructure automation teams.
• Ability to review technical designs and challenge engineering teams constructively.
• Experience producing clear architectural documentation and implementation guidance.
• Ability to balance security, operational complexity, performance and Cloud cost.

Must-Have Requirements

• Proven AWS experience in a complex professional environment.
• Genuine Security Architecture experience rather than exclusively operational security experience.
• Demonstrable experience defining AWS security architectures, standards or reusable patterns.
• Broad knowledge of AWS security across multiple domains.
• Sufficient technical depth to guide and challenge implementation teams.
• Ability to work autonomously and take ownership of architectural topics.
• Ability to connect strategic security requirements with concrete implementation.
• Strong communication skills in English.

Nice-to-Have Qualifications

• AWS Certified Security – Specialty.
• AWS Certified Solutions Architect – Professional.
• Other relevant Cloud, cybersecurity or architecture certifications.
• Experience working in a regulated, critical-infrastructure or large international environment.
• Knowledge of NIS2, ISO 27001 or similar security frameworks.
• Experience working across multiple business units, entities or countries.
• Knowledge of French or Dutch.

Soft Skills

• You are autonomous and comfortable taking ownership of complex subjects.
• You are pragmatic and focus on solutions that can realistically be implemented.
• You can defend architectural decisions with clear technical and risk-based arguments.
• You communicate effectively with engineers, architects, management and governance stakeholders.
• You are able to simplify complex AWS security concepts without losing technical accuracy.
• You are collaborative and take implementation constraints into account.
• You are structured in both your analysis and documentation.
• You remain current with developments in AWS services and Cloud Security practices.

What This Role Is Not

This position is not intended for:

• A general Enterprise Architect with limited AWS experience.
• An Azure-focused architect with only occasional exposure to AWS.
• A Security Governance specialist without technical Cloud Architecture expertise.
• A DevOps Engineer who has used security tools but has never owned an architecture.
• A purely operational Security Engineer.
• A consultant focused primarily on policies, presentations or conceptual documentation.

Practical Information

• Location: Brussels.
• Working model: Hybrid.
• Language: English is required. French or Dutch is considered an advantage.
• Seniority: Senior or expert level.
• Contract type: Freelance consultancy assignment.