Senior Infrastructure & Security Architect

In this senior, hands-on role you design and improve the secure, scalable infrastructure and cloud architecture to support Planon’s global digital operations. You translate security, continuity and operational needs into practical architectural decisions and roadmaps. You will lead complex migrations and transformation initiatives, while collaborating across the Digital Operations team to ensure reliable, secure systems. You drive secure-by-design patterns and continuous improvement, balancing governance with practical implementation.

• hybrid working
• challenging projects
• continuous development opportunities
• competitive salary
• equal opportunity employer
• working with leading clients

• Design and review secure, scalable architecture across Azure, Microsoft 365, Entra ID, hybrid infrastructure and the digital workplace
• Translate business, security and operational requirements into technical designs, architecture decisions, standards and roadmaps
• Define and embed security baselines, hardening measures, Zero Trust controls and secure-by-design patterns
• Lead complex infrastructure, migration, integration and transformation initiatives from strategy through implementation
• Assess changes and proposals for risk, compliance, scalability, resilience and operational impact
• Automate infrastructure operations and lifecycle management using PowerShell, Terraform, Infrastructure as Code and automation tooling
• Support incidents, problems and change management by investigating root causes and coordinating remediation
• Monitor continuity and implement improvements during standby shifts

• 7+ years of relevant experience in infrastructure, cloud, identity and/or security architecture (with migrations)
• Demonstrable expertise with Azure (incl network) DevOps, Intune, Microsoft 365, Entra ID and hybrid infrastructure environments
• Experience with backup, disaster recovery and defining RTO/RPO requirements
• Knowledge of Microsoft Defender, Sophos, Azure Monitor, Intune and vulnerability management
• Strong knowledge of enterprise networking, Windows and Linux Server, Active Directory and VMware virtualization
• Working knowledge of IAM, SSO, RBAC, Conditional Access, enterprise applications, Secret/certificate management APIs and Zero Trust principles
• Experience translating security and compliance requirements into implementable technical controls and operating practices
• Hands-on troubleshooting of complex infrastructure or security issues, with a focus on sustainable remediation
• Willingness to monitor continuity and work hybrid from Nijmegen HQ at least two days per week
• Fluency in English

• Clear communication
• Ownership and accountability
• Cross-functional collaboration
• Azure cloud and network architecture
• Microsoft 365 and Entra ID (Identity)
• Zero Trust principles and secure-by-design patterns