Enterprise Architect (Brussels, onsite) DG TAXUD - European Commission

Job role: Enterprise Architect (Cyber‑Security Architecture).

Minimum experience: 5–7 years .

Studies required: Bachelor’s degree or equivalent (minimum 3 years of higher education).

Language: English (C1) (Mandatory).

Location: Brussels (on-site).

DESCRIPTION:

This role involves contributing to the design and governance of cyber‑security architecture for an innovative, data‑centric program within DG TAXUD. The Enterprise Architect will work within a cloud‑native, distributed environment with a strong focus on Zero‑Trust principles, data protection, and regulatory compliance, including GDPR. The position requires defining secure data flows, implementing strict access controls, enabling continuous authentication, and ensuring real‑time security monitoring. The architect will collaborate with cloud engineers, data teams, and compliance units to guarantee a resilient, scalable, and regulatory‑aligned infrastructure. The role also includes supervising automated security controls, performing risk assessments, supporting secure system design, and ensuring the confidentiality, integrity, and availability of critical systems.

Tasks:

• Security Architecture & Risk Assessment.
• Policy Development & Enforcement (GDPR, eIDAS).
• Network & Application Security oversight (firewalls, IDS/IPS, VPN, OWASP, SDLC).
• IAM (RBAC, ABAC).
• Compliance & Audit Management (ISO 27001, NIST, GDPR).
• Incident Response & Forensics.
• DevSecOps integration.
• Cryptography governance (TLS, AES, RSA, hashing).
• Cloud Security governance (AWS, Azure, GCP).
• Pen‑testing & Vulnerability assessment.
• Data Loss Prevention (DLP).

Specific Expertise:

• Security architecture design (cloud, distributed, data‑centric systems).

• Zero Trust Architecture (ZTA) implementation and governance.

• Security risk assessments, threat modeling (MITRE ATT&CK, STRIDE).

• Network security: firewalls, IDS/IPS, VPNs.

• Application security (OWASP, secure SDLC).

• Identity & Access Management: RBAC, ABAC, continuous authentication.

• Security policy development, compliance enforcement (GDPR, eIDAS).

• Security frameworks: ISO 27001, NIST.

• Incident response, digital forensics, corrective action planning.

• DevSecOps integration in CI/CD pipelines.

• Cryptographic protocols: TLS, AES, RSA, hashing.

• Cloud security (AWS, Azure, GCP), cloud governance.

• Penetration testing & vulnerability assessments.

• Data Loss Prevention (DLP) tools and methodologies.

• Threat intelligence, SOC operations, anomaly detection.

• AI/ML security considerations.

• Quantum‑resistant cryptography principles.

• Privacy‑enhancing technologies: homomorphic encryption, differential privacy.

• Secure multi‑party computation (SMPC).

• Experience leading high‑security, high‑agility projects.

• Professional certifications: CISSP, CISM, CCSP (highly desirable).

Language:

• English (C1) (Mandatory).

Location:

• Brussels (on-site).

Rate:

• 345-390€/day. The rate offered depends on the candidate’s level, in accordance with the European Commission’s public grading system. Further details are available upon discussion.