C004280 Engineer (IdM/PKI) (NS) - TUE 23 Sep RELAUNCH

Previously proposed candidates were not compliant for the following reasons:

• Based on our assessment the candidate does not currently meet the technical requirements expected for this role particularly in the area of Public Key Infrastructure (PKI) services devops which is critical to the position.
• Based on our assessment the candidate does not currently meet the technical requirements expected for this role particularly in the area of Public Key Infrastructure (PKI) services devops which is critical to the position. Additionally we observed that the candidates command of the English language is not at the level necessary for effective communication in an international working environment. As English is essential for daily operations in this role this presents a significant limitation.

Deadline Date: Tuesday 23 September 2025

Requirement: Engineer (IdM/PKI)

Location: Mons BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 304

Required Start Date: 29 October 2025

End Contract Date: 31 December 2025

Required Security Clearance: NATO SECRET

Duties and Role:

• Responsible for developing automatic tools and processes.
• Responsible for developing containerized technologies.
• Manage and control of the lifecycle of end users and devices certificates for all NPKI CAs.
• Manage Card Management System.
• Responsible for PKI sub components connected to the NPKI CA especially in context of potential new services testing and integration.
• Responsible for the creation of NPKI related guidance and procedures (SOP).
• Responsible for the delivery of 2nd and 3rd level technical support of CIS services to the NPKI customers.
• Responsible for the NCIA ITSM ticketing system.
• Responsible for certificate creation and Smart Cards enrolment.
• Responsible for supporting all NATO exercises and missions.
• Supervises the day-to-day operations / management / backup / restore of the PKI systems.
• Responsible for NPKI system documentation hardware inventory software configuration and inventory and regular systems and applications patching.
• Be flexible to work outside normal office hours in response to crises operational requirements.
• Performs other duties as may be required.

Skill Knowledge & Experience:

• The candidate must have a currently active NATO SECRET security clearance
• A university degree in a relevant discipline and 3 years of specific experience
• Extensive knowledge of modern communication and Internet Protocol (IP) based networking technologies and systems including security aspects.
• 3 years extensive experience with PKI System development design management.
• Practical experience in PKI Architecture design.
• Extensive knowledge in Containerization technologies.
• Extensive knowledge of Kubernetes Orchestrator Service Management.
• Practical experience in automation processes tools (Ansible).
• Extensive knowledge of Information security and Cryptography (symmetric and asymmetric encryption public key infrastructure (PKI) encryption public key encryption hash functions digital signatures digital certificates).
• Knowledge of the principles of computer and communications security networking and vulnerabilities of modern operating systems and applications.
• Experience with SQL database administration.
• Practical experience in scripting (Python Powershell).

• Practical experience in SSL TLS and OpenSSL.

Desirable Experience:

• Linux RHEL system administration
• Experience in development and implementation of computer security policies.
• Knowledge of post-quantum cryptography (PQC) algorithms.
• Experience with Post-Quantum PKI.