Network Security Engineer

Spektrum supports apex purchasers (NATO UN EU and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services specialised aerospace and defence sales delivery and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATOs member countries and its partners. The agency was established in 2012 and is headquartered in Brussels Belgium.

The NCIA provides a wide range of services including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATOs communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATOs military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATOs mission to detect deny and defeat threats to its communication networks.
• Information Management: The NCIA manages NATOs information technology infrastructure including its databases applications and servers.

Overall the NCIA plays a critical role in ensuring the security and effectiveness of NATOs communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATOs principal C3 capability deliverer and CIS service provider. It provides maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV and when required stand together in the face of attack under Article V.

To provide these critical services in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorises: NATO International Civilians (NIC)s Military (Mil) and Interim Workforce Consultants (IWC)s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID 2025-0193

Role Background

The NCIA is looking for Network Engineering Security Support Services On Site delivered in SHAPE Mons Belgium.

The NCIA provides advanced technological solutions and support to NATO and its member nations. Its mission is to ensure effective and secure communication and information systems for the alliance enabling operations and decision-making. The agency plays a critical role in maintaining NATOs technological edge and operational readiness through innovation collaboration and the implementation of cutting-edge technologies.

The NATO Infrastructure Service Centre (NISC) provides generic domain independent technical capabilities that enable and facilitate the operation and use of Information Technology resources. NISC services (including: subject matter expertise; acquisition; project management operations and maintenance; and disposal) are provided in the following technical domains: network services (to include routing switching and transmission services) infrastructure hosting storage and processing infrastructure networking hardware and software management databases and web platform services as well as identity management. These services cover the entire lifecycle for both internal and external customers in static and deployable environments.

The NISC Network as a Service (NaaS) Area of Responsibility (AoR) spans all network infrastructure hardware Network Function Virtualization (NFV) elements as well as software services management and licensing components enabling the provisioning deployment network management maintenance lifecycle and vendor management of the on-premises cloud and multi cloud network infrastructure services and connectivity.

The NISC CIS Security AoR include coordination with NaaS for implementation of secure configurations for the infrastructure elements in accordance with the CIS Security accreditation documentation approved software and hardware configuration baselines (hardening guides) and security assessment reports recommendations.

Role Duties and Responsibilities

Operations:

• Follow NISC change management process for implementing the required changes;
• Document the changes that impact the CIS security posture into the CIS Security accreditation document set;
• Ensure only authorized configuration baselines are deployed on all managed systems with specific authorized deviations applied in a systemic manner using configuration rules per categories of software applications;
• Monitor continuously the security and operational dashboards logs and alerts identify misconfigurations; engage with the appropriate stakeholders and contribute to the remediation of the findings by implementing configurations and updates in coordination with NaaS Subject Matter Experts (SME);
• Ensure security-by-design and minimality principles are applied in all configuration changes;

Inventory:

• Maintain the CMDB updated with the Configuration Items used by the services/systems listed in Annex B;
• Perform all operation support and maintenance activities on the platforms described in Annex B.

Incident Logging Tracking Dispatching:

• Log and track incidents work orders and change requests using the incident ticketing system (ITSM);
• Investigate and resolve network security related issues directly assigned by endusers/requesters within the staff competences and administrator permissions;
• Maintain communication with end-users when needed;
• Ensure all tickets are updated with accurate and detailed information and resolved (or assigned to appropriate stakeholders) within the agreed service levels;

Escalation:

• Escalate complex issues to NaaS SME support or appropriate teams when necessary;
• Follow up on escalated issues to ensure timely resolution and user satisfaction.

Knowledge Base Management:

• Contribute to the creation and maintenance of a knowledge base documenting common issues and solutions;
• Share knowledge and best practices with team members to improve overall service quality.

Performance Monitoring:

• Monitor support metrics and KPIs to ensure high-quality service delivery;
• Participate in regular reviews to identify areas for improvement and implement corrective actions.

Automation and Efficiency:

• Develop and implement automation scripts to streamline routine support tasks such as software installations updates system checks and notifications;
• Utilize automation to create workflows for repetitive tasks improve service efficiency and proactively implement solutions;
• Leverage Infrastructure as Code (IaC).

Communication and Collaboration:

• Communicate effectively with internal user community to understand their issues and provide clear instructions;
• Collaborate with IT teams to resolve issues and improve service delivery

Essential Skills Experience and Certifications

Technical Proficiency:

• The support for this service requires the following technical proficiencies with minimum 3 years experiences in the following domains:
• Knowledge and experience with design implementation and operation of the core network architecture for large organizations;
• Knowledge and experience with configuration troubleshooting and optimization of routers switches firewalls and other hardware/software networking elements;
• CCNP Routing and Switching;
• Services and Technology Professional Certification (e.g. ITIL CCIE SRA JNCIE or Devnet Professional or equivalent experience);
• Knowledge and experience with Networks specification design and testing with an emphasis on IP networks including IPv6 QoS MPLS MP-BGP;
• Knowledge and experience of Network Functions Virtualization (NFV)/Software Defined (SDx) (e.g. SDN SD-WAN SDDC or SASE);
• Experience with managing Windows Linux operating systems;
• Knowledge and experience with implementing security configurations in enterprise networks.

The support for this service requires performing the following tasks:

• Installation Configuration Management Security
• Monitoring Upgrade Patching

Problem-Solving Skills:

• Strong troubleshooting skills to diagnose and resolve hardware software and network issues.
• Ability to guide users through problem-solving steps effectively.

Automation Skills:

• Shell scripting to automate routine support tasks.
• Create automated workflows and automate repetitive processes.
• Ability to identify and implement automation opportunities to enhance efficiency.

Communication and Interpersonal Skills:

• Excellent verbal and written communication skills.
• Ability to communicate technical information to non-technical users in a clear and concise manner.

Customer Service Orientation:

• Strong customer service focus with a commitment to user satisfaction.
• Patience and empathy when dealing with user issues and concerns.

Organizational Skills:

• Ability to manage multiple support tickets and prioritize tasks effectively
• Attention to detail in documenting support activities and maintaining accurate records.

Team Collaboration:

• Ability to work effectively as part of a team and share knowledge and resources.
• Willingness to collaborate with colleagues to solve complex issues.

Others:

• The candidate has strong customer relationship skills including negotiating complex and sensitive situations under pressure.

Language Proficiency

• Full proficiency in English.

Working Location

• Mons Belgium

Working Policy

• On-Site

Travel

• Some travel to other NATO sites may be required

Security Clearance

• Valid National or NATO Secret personal security clearance