Senior Cybersecurity Architect

Mission Overview:

As a Senior Cybersecurity Architect, you will play a pivotal role in designing, evolving, and challenging the cybersecurity architecture for our client, ensuring that security, risk, and compliance requirements are translated into robust, realistic, and maintainable technical solutions. This position is a consultancy mission at the client site, representing Keystone Solutions, where you will collaborate directly with the client's IT teams in a consulting capacity, focusing on co-construction, skills transfer, and client orientation.

Key Responsibilities:

• Analyze the existing cybersecurity architecture and formulate recommendations for evolution in line with the overall IT architecture and defined requirements.
• Identify and document risks, dependencies, vulnerabilities, and points of fragility, proposing prioritized improvement paths for decision-making.
• Conduct or contribute to security architecture reviews for new projects, migrations, or significant changes, providing findings, risks, and associated recommendations.
• Propose and document, in collaboration with the client's IT teams, principles of segmentation, flow control, access, resilience, and defense in depth, subject to client validation.
• Analyze identity, access, authentication, privileged accounts, and trust mechanisms, formulating corresponding architectural recommendations.
• Advise relevant teams on logging, monitoring, detection, traceability needs, and integration with security monitoring capabilities.
• Propose and formalize standards, security patterns, hardening principles, and reusable technical requirements with the client's IT teams, subject to prior validation.
• Constructively challenge technical proposals from vendors, integrators, or partners, identifying impacts, dependencies, risks, and alternatives, advising the client in decision-making.
• Provide expertise during technical analyses related to major incidents, resilience, continuity, or recovery, under the coordination and decisions of the client.
• Ensure technological and regulatory monitoring, presenting potential value-adding evolutions to the client, along with justifications, benefits, risks, and impacts.
• Support the client's IT teams in analyzing, understanding, and preparing for the implementation of approved recommendations.
• Actively share knowledge and expertise with internal teams to foster autonomy and avoid excessive dependency on the consultant or a vendor.

Profile and Experience:

• Minimum 10 years of experience in complex enterprise IT environments, with at least 7 years in cybersecurity and 5 years in a Security Architect or Cybersecurity Architect role.
• Proven experience in designing, reviewing, and evolving security architectures across multiple domains: network and connectivity, datacenter, identity and access, perimeter security, remote access, cloud/hybrid, and security monitoring.
• Ability to produce and maintain high-level and detailed architectures, flow diagrams, communication matrices, segmentation principles, architectural decisions, and security requirements.
• Excellent understanding of enterprise security technologies and the ability to reason independently of vendors.
• Good mastery of identity and access architectures: IAM, MFA, privileged accounts, PKI, certificates, strong authentication, and PAM principles.
• Good understanding of network architectures, segmentation, routing, high availability, interconnections, remote access, and flow control mechanisms.
• Good understanding of systems environments, virtualization, datacenter, cloud/hybrid, and continuity and resilience issues.
• Experience with logging architectures, SIEM/SOC, and security monitoring: collection, correlation, detection, retention, and traceability.
• Ability to conduct technical risk analyses, challenge vendor proposals, and formulate proportionate, actionable, and documented recommendations.
• Ability to translate regulatory, governance, and risk requirements into concrete architectural controls and decisions.

Standards, Frameworks, and Certifications:

• Mastery of ISO/IEC 27001:2022 requirements and principles, translating them into architectural requirements and technical controls.
• Good knowledge of ISO/IEC 27002:2022 and ISO/IEC 27005:2022, particularly for selecting security measures and managing risks related to architectural choices.
• Good knowledge of NIS2, GDPR, and key cybersecurity frameworks applicable to a public or regulated environment.
• Mastery of the CyberFundamentals (CyFun®) Framework from the Centre for Cybersecurity Belgium (CCB), in its current version, including assurance levels and associated requirements.
• Practical knowledge of complementary frameworks such as NIST Cybersecurity Framework and CIS Controls; knowledge of continuity, incident management, and cloud security frameworks is a plus.

Professional Skills and Attributes:

• Client orientation: Understand the client's needs, constraints, and priorities before proposing solutions.
• Listening and collaboration: Work in a partnership spirit, valuing the internal teams' knowledge of the environment.
• Communication and pedagogy: Clearly explain complex subjects to technical and non-technical audiences.
• Constructive critical thinking: Challenge solutions without imposing answers; argue based on risks, facts, and best practices.
• Pragmatism: Avoid theoretical or oversized architectures, seeking the best balance between security, availability, costs, and business needs.
• Transparency and integrity: Communicate assumptions, limits, risks, and uncertainties clearly.
• Rigor: Work in a structured, traceable, and documented manner, focusing on the quality of deliverables.
• Responsible autonomy: Conduct analyses independently while respecting the client's responsibilities and validation processes.
• Knowledge transfer: Actively share expertise and contribute to the internal teams' progressive autonomy.
• Technological neutrality: Advise in the client's interest and objectively evaluate multiple options when relevant.

Education:

Master's degree in Computer Science, Cybersecurity, Information Systems Security, Networks and Telecommunications, Engineering Sciences, or equivalent training. Significant and demonstrable professional experience in cybersecurity architecture may be considered equivalent, provided the candidate meets the expected level of expertise and seniority.

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.

Duration: 04/01/2027 - 31/12/2027 12 months • (full time)

Skills required:

• Architect - Level: Expert - Most recent: This year
• Cyber Security - Level: Expert - Most recent: This year
• Firewall - Level: Expert - Most recent: Any time
• ISO27001 - Level: Expert - Most recent: This year
• NIST - Level: Expert - Most recent: Any time
• Risk Management - Level: Expert - Most recent: Any time
• SIEM - Level: Expert - Most recent: Any time
• SOC - Level: Expert - Most recent: Any time

Language requirements:

Dutch
Level Passive knowledge
English
Level Passive knowledge
French
Level Native