Senior Cyber Security Architect

• Function title: Senior Cyber Security Architect
• Reference: NOC-MA-AD/1138
• Location: Maastricht
• The selected candidate must reside either at this location or within a reasonable proximity that allows for the satisfactory execution of their duties.
• Information about living in Maastricht
• Nature of competition: Internal and external competition
• Applicable regulations: General conditions of employment governing servants at the EUROCONTROL Maastricht Centre
• Type of post: Administrator
• Job level: AD9-AD11 - Check salary simulations for the basic grade
• Generic job title: Senior Technical/Administrative Expert
• Number of posts: 1
• Duration of appointment: 5 Year(s) - renewal or conversion of the contract is possible under certain conditions see “Useful information” section
• Security clearance: Security vetting may be required in accordance with the relevant EUROCONTROL security provisions
• Directorate/Service: MUAC/ENG/SAS/SDT - The Security Design Team
• Working arrangement: EUROCONTROL operates a hybrid working model that combines onsite presence with remote work opportunities. Remote working is subject to specific limits set out in internal rules and must align with business needs and managerial approval. Please note that full-time remote work is not permitted.
• Competition publication date: 25/06/2026
• Competition closing date: 23/07/2026 (23:59 Brussels time)
• Reserve list: Applicable - See details in the "Useful information" section

Your team

Within the The Directorate Maastricht Upper Area Control Centre, the Engineering Division (ENG) is responsible for developing and providing the Communication and IT Infrastructure, ATM systems, IT security activities and facility services.

Your role

Your role will be to:

• Provide senior technical expertise, strategic technical guidance and advice on cyber security related IT architecture ensuring alignment with the organisational objectives and long-term sustainability.
• Lead the definition, development and coordination of architecture roadmaps, that align with the organisation’s security vision and evolving technology needs.
• Contribute to the definition and implementation of robust architecture strategies, standards, and policies, and ensure these strategies support both immediate and future cyber security needs.
• Foster collaboration with key internal partners (e.g. Corporate Security team, programme and project managers, other IT architects and technical teams) to promote an integrated approach to architecture, and act as technical liaison in cyber security.
• Lead the evaluation of emerging cyber security related technologies and tools, continuously assessing and recommending new solutions that will advance the organisation’s architectural capabilities and address evolving business needs.
• Ensure adherence to architecture standards, policies, and security protocols; establish governance processes to ensure conformance across all projects and address any deviations in alignment with organisational policies.
• Provide guidance and mentorship to teams and/or colleagues as required, fostering an environment of continuous improvement and technical excellence.
• Lead high-level discussions and provide direction on best practices to ensure successful integration and scalability of architecture solutions.
• Plan, manage, and monitor team output, including resource allocation, objective-setting, and performance evaluation. Address performance issues through training and coaching to ensure the required competencies are available when needed.
• Carry out any other task in line with the main purpose of the job.

Required qualifications, experience & competencies

• Completion of third level studies (e.g. Computer Science, IT), meeting European Qualifications Framework (EQF) Level 6 and relevant professional experience of 11 years.
• Completion of third level studies (e.g. Computer Science, IT), meeting European Qualifications Framework (EQF) Level 7 and relevant professional experience of 10 years.
• Internal candidates can check on the intranet to see what level of in-house experience is considered equivalent to educational qualifications where appropriate.
• Proficiency in modern cybersecurity technologies, both for on-prem and cloud/hybrid architectures (e.g. Public Key Infrastructure (PKI), cryptography, communication, network security, identity and access management, data backup and recovery).
• Proficiency in design and implementation of zero-trust architectures.
• Proficiency in security integration throughout the software development cycle.
• Experience connecting business risks, IT architecture, technology and governance into a coherent cyber security posture, respecting the constraints of the organisation.
• Experience in ensuring compliance with cybersecurity regulations and standards (e.g. NIS2, ISO27001, SOC2, EASA part IS).
• English drafting skills (technical documentation).

• The following competencies are considered an asset:

  • Experience in people management or supervision

• Problem-solving: You solve complex problems and provide effective solutions.
• Planning & organising: You plan ahead and adapt as required.
• Communication: You foster two-way communication.
• Managing People: You implement effective people management practices.
• Networking: You maintain and expand effective networks.
• Ability to work in a multinational and multicultural environment.
• Professional conduct in line with the corporate behaviours of the Agency, i.e. result-driven, readiness to change, customer focus, integrity and team-player approach.
• The working languages of the Agency are English and French. For this particular job, candidates must be proficient users of English at level C1.
  The levels relate to the Common European Framework of References for languages (CEFR).

Useful information

• Applications will be accepted from nationals of EUROCONTROL Member States only.
• The selected candidate may be required to provide documentary evidence confirming they meet the minimum education requirements. They will be informed if and when specific evidence is needed. Please note that no offer (for external candidates) or appointment (for internal candidates) will be made until the necessary evidence, if required, is validated.
• The selected candidate will be appointed in accordance with the provisions of the General conditions of employment governing servants at the EUROCONTROL Maastricht Centre.
• Conditions depending on current type of appointment
  Internal staff appointed for a determined period
  • Retain their current type of appointment duration.
  • Continue under their existing appointment duration, as appointment durations are not cumulative.
  • The duration of their appointment will therefore not restart upon selection to the new post, i.e. the remaining duration of their current determined appointment continues to apply.
  • Renewal(s): This appointment may be renewed several times, but its total duration, including all renewal periods, may not exceed nine (9) years.
  • Conversion: Conversion to an undetermined duration appointment is possible where all of the following cumulative conditions are met: the post is confirmed as being of a lasting nature; the staff member has completed at least five years of service; the staff member’s performance has been satisfactory; and the conversion is in the interests of the service. Conversion is therefore not automatic.
  Internal staff appointed for an undetermined period
  • Retain their current type of appointment duration.
  At the end of the 5 Year period of the post for which they were selected:
  • If the assignment is extended, they will continue in the post in accordance with the applicable rules.
  • If the assignment is not extended and/or the duties are not confirmed as being of a lasting nature, they will be transferred to another post corresponding to their “previous” type of post, job level, and function group.
• The selected candidate must successfully complete a probationary period of nine (9) months before being established in the post.
• This post entails management activities. Established staff members will therefore have to serve a confirmation period of 9 months. This period may be shortened to 6 months if the selected candidate is appointed following a competition preceded by a previous temporary assignment to the post for which s/he was selected. The Director General may also decide not to make subject to this provision if that official has previously been assigned, for a period of 2 years or more, to a post similar to that for which he has been selected and which entailed the same level of management responsibilities.
• The selected candidate shall be appointed at the grade set out in this vacancy notice, or if a group of grades has been published for a job level, in principle at the basic grade of the published job level.

• Candidates declared suitable who are not selected for the post will be placed on a reserve list for similar roles. The reserve list will be valid for one year from the closing date of applications.
• Information on salary and benefits can be found on our Careers site
• EUROCONTROL is an equal opportunities employer. We are committed to equality and diversity. In the event of equal merit, preference may be given to the applicant from the under-represented diversity characteristics in order to complement diversity of teams and rebalance the workforce.
• Candidates should go to our Careers site and .