Security Architect

Role description

The Tech Security Architect will define and govern secure, resilient technology architecture for the Technology Function, translating business drivers and risk priorities into scalable, future-ready infrastructure and operational security solutions. This role ensures platforms are secure by design, aligned to business outcomes, and sustainable, while managing risk, complexity and long-term service quality.

• Job title: Security Architect
• Location: Netherlands +2 more

Role accountabilities

• Translate business and technology strategy into architectural principles, reference models and future-state roadmaps.
• Design enterprise-wide infrastructure and platform architecture spanning on-prem, hybrid, multi-cloud, data centres, AI/ML foundations, edge and emerging technologies.
• Ensure interoperability, scalability, maintainability, performance and resilience across the IT estate.
• Define and enforce non-negotiable architecture standards, controls and guardrails.
• Embed “secure by design” and resilience principles into all technology designs.
• Govern adherence to architecture through reviews, patterns and design assurance.
• Lead gap analyses between current and future states.
• Define migration and modernisation plans aligned to business priorities.
• Assess infrastructure readiness for AI workloads and data-intensive platforms.
• Embed AI-driven infrastructure and automation approaches where appropriate.
• Partner with Enterprise Architecture, Solution and Domain Architects to ensure alignment across programmes and platforms.
• Engage with business, security, SOC, risk, legal, vendors and DevOps teams to balance requirements, constraints and opportunities.
• Provide architectural direction, coaching and mentoring to uplift capability.
• Identify and assess architectural risk across platforms, integrations, data flows and infrastructure landscapes.
• Provide clear, evidence-based trade-off recommendations balancing speed, cost, risk, scalability and long-term sustainability.
• Prevent unnecessary complexity by enforcing architectural standards and reducing duplication across technology towers.
• Embed security into DevOps and platform engineering (shift-left and continuous validation).
• Define threat modelling, detection engineering and secure runbook expectations.
• Enable continuous threat exposure management (CTEM) across infrastructure and applications.
• Deliver a coherent, secure and resilient global technology architecture.
• Align technology roadmaps to business outcomes and operational needs.
• Reduce technical debt and unmanaged complexity across the IT estate.
• Accountable for the health, safety, and wellbeing (HSW) of their teams, and expected to demonstrate stewardship and care in all aspects of their role. This includes championing an ambitious, people-first culture within Technology by setting clear HSW expectations, leading by example, empowering and engaging employees, and communicating openly.
• Leaders should recognize safe behaviors and foster a caring, One Team ethos—where everyone feels empowered to take responsibility, speak up, and return home unharmed, both physically and psychologically.

Qualifications & Experience

• 8+ years’ experience in security related architecture.
• Proven track record defining and implementing enterprise architecture strategy across multiple technology towers, including applications, data, infrastructure, and security.
• Strong expertise in integration design, master data architecture, and interoperability frameworks.
• Deep understanding of secure, resilient technology architecture and the translation of business drivers and risk priorities into scalable, future-ready infrastructure and operational security solutions.
• Experience defining and enforcing non-negotiable architecture standards, controls and guardrails, and embedding secure by design and resilience principles into technology designs.
• Strong knowledge of security architecture across platforms, integrations, data flows and infrastructure landscapes, including threat modeling, detection engineering and secure runbook expectations.
• Experience enabling continuous threat exposure management across infrastructure and applications and embedding security into DevOps and platform engineering.
• Strong stakeholder management and influencing skills, with the ability to partner effectively with Enterprise Architecture, Solution and Domain Architects, Cybersecurity and SOC, Risk, Legal and Compliance, vendors, and Data, Platform and Product or DevOps teams.
• Strong analytical judgment and trade-off management capability, balancing speed, cost, risk, scalability, and long-term sustainability.
• Leadership style that empowers Arcadians, promotes accountability and continuous improvement, and supports a healthy, inclusive and high engagement culture aligned to the Arcadis Leadership profile of being curious, driving success and igniting passion.
• Degree level education in cybersecurity, computer science, information systems, software engineering or a related field, or equivalent practical experience.
• Advanced degree preferred such as a Master’s in cybersecurity, information security, computer science or a related field, or equivalent senior-level experience in complex global organizations.

Why Arcadis?

We can only achieve our goals when everyone is empowered to be their best. We believe everyone's contribution matters. It’s why we are pioneering a skills-based approach, where you can harness your unique experience and expertise to carve your career path and maximize the impact we can make together.

You’ll do meaningful work, and no matter what role, you’ll be helping to deliver sustainable solutions for a more prosperous planet. Make your mark, on your career, your colleagues, your clients, your life and the world around you.