Point-in-time audits are dying. Somebody has to build what replaces them.

A multinational defence organisation in The Hague, Netherlands is moving from manual audits towards continuous governance, risk and compliance — controls expressed as code, evidence collected automatically, and authorisation that is a live state rather than an annual event. You would be the engineer who makes that run.

What you would be doing

• Preparing the target container platform: deployment, database, API gateway, networking and configuration
• Configuring and testing identity integration — role mappings, automated onboarding and access control
• Standing up and validating connectors that pull compliance, telemetry and software-inventory data from the cloud estate
• Confirming imported control statuses and evidence arrive, normalise and map correctly
• Running controlled test changes to prove event-driven updates are detected accurately
• Wiring the workflows so a failed control raises a ticket by itself
• Running stakeholder review sessions to test the assumptions and the mappings
• Tracking issues through to remediation

What you would bring

• A bachelor's degree in a related discipline with three years of related experience
• Three years across all of: Kubernetes; REST API integration; Python and scripting; CI/CD pipelines
• Drafting technical data flows
• Webhooks and the Jira or ServiceNow APIs
• Microsoft 365 Graph API and Security Center
• Red-teaming against compliance requirements
• PowerShell, cloud APIs and JSON
• OAuth2, OIDC and identity management
• Documented experience of process analysis and design

Nice to have

• Real technical knowledge of how allied organisations achieve interoperability
• A working understanding of defence cloud strategy
• ITIL, COBIT or an equivalent

Why this one is worth a look

Compliance engineering is where cloud, security and automation meet, and very few people have done it at this scale. This is a build, not a maintenance post.