C005198 Cyber Security Firewall Support (CTS) FRI 4 Sep

Deadline Date: Friday 4 September 2026

Requirement: Cyber Security Firewall Support

Location: Mons BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 418

Required Start Date: 1 October 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO COSMIC TOP SECRET

Duties & Role:

Tasks performed by a contractor include:

• Build implement maintain and support Next-Generation Firewalls (NGFW) (System Administration).
• Configure maintain and review security policies on Next-Generation Firewalls (System Configuration)

Under the direction / guidance of the NCSC Point of Contact a contractor will be the part of the NCSC SEC011 Team supporting the following activities:

1. Central system administration of NGFWs to ensure continuing functionality and availability.

• Initial systems installation (software application and threat signatures) and configuration
• Adding system to central management capability
• Assign initial template and device group settings
• Configure date/time/DNS settings
• Configure high-availability settings
• Update system software/signatures during pre-defined maintenance windows

2. Central configuration of NGFWs

• Implementation and verification of firewall rulesets/policies
• Adaptation of firewall rulesets/policies
• Adaptation of email attachment types
• Configuration of additional firewall rulesets/policies

3. Documentation of Firewall systems

• Development of SOPs and other documentation for repetitive activities
• Produce and maintain comprehensive documentation for all implemented systems
• Review and update security documentation

4. Support of Firewall systems

• Technical support in troubleshooting infrastructure and operational issues
• Collaborate with other teams for a successful resolution;
• Provide technical support and guidance by answering end-user requests to identify issues in secure cross-domain data exchange

The measurement of execution for this work is sprints with each sprint planned for a duration of 1 week.

Central administration of NGFWs

The purpose of daily Central administration and configuration of NGFWs is to ensure continuing functionality and availability of those critical systems in order to support a wide range of end-user facing services.

The Service Provider will:

• Support the team by routinely reviewing the tickets queue to ensure 4 hours response time for normal events and 1 hour response time for high/critical events
• Provide multi-channel support (phone email internal chat)
• Develop and maintain a repository of scrips to automate recurring systems administration activities.
• Ensure correct logging and log forwarding configurations to support availability of system events in central log database.
• Provide pro-active system administration and maintenance to prevent system failures
• Escalate critical events to appropriate channels within 4 hours
• Support system upgrading/patching during established maintenance windows

GSS contractor is expected to be a knowledgeable firewall administrator and should have sufficient knowledge in Networks and Cyber Security Tools.

Central configuration of NGFWs

The Service Provider will:

• Support the team by routinely reviewing the tickets queue to ensure 4 hours response time for normal events and 1 hour response time for high/critical events
• Provide multi-channel support (phone email internal chat)
• Update the configuration of firewall rules/policies based on changing requirements.

The primary purpose of Central configuration of firewalls is to ensure that all configuration requests are properly prepared (investigated evaluated and risk assessed) for consideration documented and implemented.

Documentation of firewall systems

The Service Provider will:

• Document the setup configuration installation specifics into the GSS documentation repository
• Attend internal meetings within GSS team to provide hands-on demonstration and familiarization of firewall system

Specific Working Conditions: The contractor will be required to provide the service 100% on-site at NCIA Mons Belgium. Exceptional off-site activities to support service delivery can also be arranged with the line managers coordination and approval.

There may be limited travel required (max.3 times/per year each travel up to 3 working days) specifically to Brussels Belgium The Hague Netherlands or Brunsum Netherlands. No additional cost for travel (including accommodation per diem travel expenses etc.) will be claimed separately. All travel arrangements are the responsibility of the contractor.

Skills Knowledge & Experience:

Contractor who is going to perform the identified tasks as Cyber Security Firewall Support must have demonstrated skills knowledge and experience as listed below. Activities performed by the contractor include facilitation of all lifecycle aspects of Boundary Protection Components deployed within and on the edge of NATO networks.

Services under current SOW are to be delivered by ONE resource that must meet the following experience qualities and qualifications:

• The candidate must have a currently active NATO COSMIC TOP SECRET security clearance
• Bachelors degree in Computer Science Information Technology or related field Or equivalent experience.
• Official firewall certification (such as PCNSA)
• Official Network Management certification (such as Network)
• Official Service Management certification (such as ITIL Foundation)
• 2 years of experience in IT security with a focus on Security Tools Management in large organisations.
• Strong understanding of security best practices
• Good engineering skills including programming
• Demonstrable experience of analysing and interpreting system security and application logs in order to diagnose faults and spot abnormal behaviours.
• More than 2 years of experience in Palo Alto Networks Firewalls and Palo Alto Networks Panorama for Enterprise level deployments
• More than 2 years of experience in firewall installation and management of other vendors
• More than 2 years of experience in Scripting/Automation (Bash Python Ansible)
• More than 2 years of experience in system monitoring and troubleshooting Experience with network protocols and traffic analysis
• Ability to troubleshoot complex network security issues
• More than 2 years of experience in LAN/WAN networking including protocol network architecture
• More than 2 years of experience in TCP/IP protocols and services
• Profound communication abilities both written and verbal with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams

Additionally the following experience qualities and qualifications are desirable:

• Understanding of Information Security Practices; relating to the Confidentiality Integrity and Availability of information (CIA triad.)
• Possession of Industry leading certification in the area of Cybersecurity such as CISSP CISM CISA GSNA SANS GIAC

In addition to the above it is desirable for the contracted individual to have working experience and knowledge in the following areas:

• Experience in working with NATO.
• Experience of working with NATO Communications and Information Agency.
• Experience of working with national Defence or Government entities.
• Previous work in an international environment comprising both military and civilian elements.