Security Engineer

Senior Security Engineer

Start: asap

Location: Amsterdam

Work type: Hybrid (2 days per week onsite)

Language: Dutch + English

As Senior Security Engineer, you are responsible for securing customer-specific Digital Sovereign Private Cloud environments throughout their full lifecycle. You operate hands-on within the DevSecOps delivery team, translating regulatory, compliance and security requirements into enforceable, automated security controls across OpenShift-based platforms.

You own compliance readiness and security assurance for customer environments, including audit preparation and evidence generation. Working in close partnership with the Lead Delivery Architect, you ensure that security is embedded by design and enforced by automation, without compromising delivery speed or platform stability.

Activities

• Design and implement security architecture, hardening and zero-trust controls for customer-specific OpenShift platform environments.
• Define, implement and enforce security and compliance policies across clusters, pipelines and platform components.
• Own compliance readiness for customer environments, including audit preparation, evidence collection and traceability.
• Translate regulatory and customer security requirements into policy-as-code and automated controls.
• Design and operate security automation including vulnerability scanning, policy enforcement and continuous compliance validation.
• Manage identity, access control (RBAC), secrets management, encryption and audit logging configurations.
• Monitor platform security posture and vulnerabilities in collaboration with SREs and platform engineers.
• Support security assessments, risk analysis and incident response activities within customer environments.
• Act as the primary security escalation point for customer platform incidents and findings.
• Advise customer teams on security best practices, mitigations and secure platform usage.
• Collaborate closely with the Lead Delivery Architect to align security decisions with platform architecture and delivery constraints.

Characteristics and Skills

• Strong hands-on experience securing Kubernetes or Red Hat OpenShift platforms in production.
• Proven experience implementing security controls, hardening and monitoring in cloud-native environments.
• Strong background in security automation, policy-as-code and continuous compliance.
• Experience supporting audits and compliance assessments in regulated environments.
• Solid understanding of identity, encryption, secrets management and logging in distributed platforms.
• Highly detail-oriented with strong risk awareness and analytical capabilities.
• Clear communicator of security risks, controls and trade-offs.
• Self-driven team player with a strong DevSecOps mindset.
• Fluent in English & Dutch.

Additional Skills & Experience

• Experience working in regulated or sovereign environments (government, defense, justice, public sector).
• Knowledge of cloud and security compliance frameworks such as EU-GDPR, NIS2, BIO2, EU-CoC, EUCS and ISO 27001/17/18.
• Experience integrating security scanning (SAST, DAST, SCA) and compliance checks into CI/CD pipelines.
• Ability to balance strict security requirements with pragmatic delivery and automation.
• Experience collaborating with architects and platform teams on secure-by-design solutions.

Profile

• Position available for candidates based in the Netherlands & Belgium.
• Strong IT and security background with focus on cloud platforms and regulated environments.
• Relevant experience in cloud or platform security roles.
• Comfortable operating in customer-facing environments with high compliance and availability requirements.
• Willingness to undergo required background screening (e.g. BO+).
• Relevant security certifications are a plus.

What We Offer

• A security ownership role in a strategic Digital Sovereign Private Cloud capability.
• Direct responsibility for compliance readiness and secure operation of mission-critical customer platforms.
• Close collaboration with senior architects and platform engineers on secure-by-design delivery.
• Exposure to complex regulatory environments and advanced cloud security challenges.
• Strong opportunities for professional growth in sovereign cloud and DevSecOps security engineering.