Senior Architect, Cyber Security IRIS

The job responsibilities outlined in this document are not exhaustive and may evolve over time and be reviewed according to business needs.

IRIS2 is the new European Union secure satellite constellation. This project is the European Union's answer to the pressing challenges of tomorrow to provide secure connectivity services and enhanced communication capacities to the EU and its Member States. In addition, governmental users, private companies and European citizens while benefiting from ensuring high-speed internet broadband to cope with connectivity dead zones.

SES , together with other consortium partners and core members, was selected by the European Commission to build and operate the IRIS2 multi-orbit satellite constellation.

As the IRIS2 team enters the next project phases, there is a strong need of support for all the activities around service provisioning and products that the system can offer in the future.

The Cyber Security Architect, IRIS² will be responsible for shaping and assuring the programme’s cybersecurity architecture, ensuring that security-by-design principles are embedded across the end-to-end system.

The successful candidate will work closely with Programme leadership, System Engineering, Space and Ground segment teams, Security work groups, Services and Operations, consortium partners and external stakeholders to ensure that the IRIS² solution is secure, certifiable, operable and resilient.

• Define, maintain and govern cybersecurity architecture across space, ground, network, service, operational and support environments.
• Act as a security design authority for cybersecurity decisions, design reviews and architecture trade-offs across the programme.
• Translate programme security objectives into architecture requirements, security controls, design patterns, and assurance activities.
• Ensure acquired, developed and integrated systems remain aligned with IRIS² security architecture guidelines and security-by-design principles.
• Lead architectural decisions related to cryptography, key management, identity and access management, secure interfaces, segmentation, multi-level security, GNSS resilience, and operational resilience.

• Drive cybersecurity governance activities supporting security accreditation, certification, and formal assurance expectations.
• Lead the preparation and review of accreditation and certification inputs, evidence packages, architecture justifications, and security governance material.
• Support compliance audits, penetration tests, security assessments, and assurance reviews from an architecture and risk perspective.
• Ensure security architecture, risk treatment decisions and accreditation evidence remain consistent and traceable.
• Contribute to the review and evolution of cybersecurity implementation, accreditation, certification, component security, and end-to-end risk documentation.

• Lead or guide security risk assessments, threat modelling and security impact assessments for major programme design decisions.
• Define risk treatment approaches and mitigation strategies for cybersecurity threats affecting mission critical satellite communications systems.
• Provide expert guidance on security resilience, critical infrastructure protection, and secure mission operations.
• Advise on ISMS-related protection requirements and ensure alignment between security controls, operational needs and governance documentation.

• Coordinate security architecture activities with Programme teams, System Engineering, Security work groups, Services and Operations, Core Team subcontractors and managed service partners.
• Influence multidisciplinary stakeholders by explaining cyber risk, design implications and security trade-offs in a clear and pragmatic way.
• Support procurement and supplier engagement by reviewing cybersecurity requirements, security product strategies, and architectural dependencies.
• Provide technical leadership in an agile, international, and matrixed programme environment.

• University degree in Cybersecurity, Engineering, Telecommunications, Computer Science, Information Security or a related technical discipline.
• Typically, 10+ years of experience in cybersecurity, security architecture, secure systems engineering, or secure solution design.
• Proven…