Senior Application & IT Security… at Spektrum Group · Braine-l'…

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

---

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

---

Role ID – C005136

Role Duties and Responsibilities

Main Duties

1. COTS Application Support a) Design and run PoCs; produce evidence-based recommendations covering cost, operational impact, lock-in and exit strategy. b) Security architecture: define secure-by-design reference architectures, patterns and hardening baselines; review new and changed service designs at architecture gates. c) Threat modelling and risk: lead threat modelling for new or materially changed services; own the technical risk register entries; propose proportionate mitigations and track remediation to closure. d) Support deployment of server applications running on Windows or Linux; e) Integrate applications with identity providers; r) Support creation and deployment of client applications on end-user workstations. g) Gathering and reporting metrics and Key Performance Indicators (KPIs) h) Supporting in-service operations. i) Support the operation of the assigned system(s) including:

• Systems operationally used by NATO Enterprise community;
• Local systems currently used by Local Commands;
• Atlassian Products management and configuration
• Maintenance of the operational & support environments;
• Monitoring performance of the assigned service applications;
• Support CIS Support Units (CSU) and other support staff for daily operations of the systems

2. Cloud Configuration (Azure, AWS) a) Manage EntraID Groups and Roles b) Manage and configure different Cloud components
3. AI related activities a) Deployment, configuration and support of AI based solutions, tools and agents b) Support of COTS applications-AI integration in production environments c) Ongoing Monitoring of applications, and coordinating Maintenance
4. COTS End-User Support: a) Troubleshoot and resolve complex software problems, ensuring efficient use of resources and problem resolution.
5. Incident Logging and Tracking: a) Monitor the incident management process for tickets created in the helpdesk ticketing system. b) Ensure all tickets are updated with accurate and detailed information and resolved within the agreed service levels.
6. Escalation: a) Escalate complex issues to vendor support or appropriate teams when necessary. b) Follow up on escalated issues to ensure timely resolution and user satisfaction.
7. Knowledge Base Management: a) Contribute to the creation and maintenance of a knowledge base, documenting common issues and solutions. b) Share knowledge and best practices with team members to improve overall service quality. c) Contribute to analysis and documentation of new requirements and change requests. d) Participate in review of documentation such as requirements definitions, software design (functional/technical analysis), systems specifications or other deliverables.
8. Technical: a) Controlling, managing and providing access to the restricted areas managed by the business area. b) Ensuring the proper functionality and security of software and hardware managed by NBAC. c) Monitoring COTS Applications and other software managed by NBAC by identifying and reporting any problems with the infrastructure, hardware and software applications. d) Providing support to NBAC team for security approval and accreditation of software applications and CIS. e) Controlling and checking compliance with security regulations laid down by NCIA and NATO on the use of software and hardware which is part of the NBAC services. f) Gathering functional and non-functional requirements, including drafting systems specifications. g) Support technical reviews, walkthroughs and audits. h) Support preparation of functional and technical specifications for software and hardware with special focus on the SSBA BA domain. i) Support to change management, configuration management, release/deployment and testing.
9. Communication and Collaboration: a) Work with and provide input to Service Delivery Managers, Project Managers, Portfolio Managers and other stakeholders b) Collaborate with NCIA and vendors teams

Essential Skills, Experience and Certifications

1. Technical Proficiency: a) Deep understanding of end-user devices (desktops, laptops, tablets, smartphones) running Windows OS, Android OS and Apple iPhones/iPads. b) Expert knowledge of computing infrastructure – Linux, Windows and Active Directory. c) Expert knowledge of Microsoft SQL Server 2019-2025 and IIS based web applications. d) Very good understanding and experience with AI/LLM. e) Deep understanding of networking infrastructure. f) Very good knowledge of cloud technologies and cloud deployment for both AWS and Azure. g) Deep understanding of PKI, certificate management, post- quantum migration. h) Expert knowledge relevant to software engineering

. Technologies and standards (at least 4 of them): HTML5, REST & Web Services, XML, HTTP, SQL, Visual Basic for Applications; ii. Identity Management (OAuth, OIDC, SAML2) application integration; iii. Application server technologies and Relational Database Management Systems; iv. Programming languages and platforms - .NET/C#, JAVA, JavaScript; i) Deep understanding of security constraints and requirements in CIS. j) Deep understanding of NCIA and NATO security directives and regulations, along with understanding of industry best practices and standards. k) Familiarity with Microsoft services and tools, including Outlook, Teams, SharePoint. l) Experience and good knowledge of at least the following COTS technologies: i. IIS, JBOSS, Apache Tomcat ii. .NET based applications m) Extensive experience in deployment and management of client- server applications, application integration and data transformation for application integration; n) Evidence-driven and vendor-neutral; able to say "not yet" and defend the position. 2) Problem-Solving Skills: a) Strong technical skills to investigate, diagnose and resolve complex IT issues. 3) Communication and Interpersonal Skills: a) Excellent verbal and written communication skills. b) Full proficiency in English. French language proficiency is of advantage. c) Ability to communicate technical information to non-technical users in a clear and concise manner. d) Ability to work in cross-functional application management/deployment teams. 4) Customer Service Orientation: a) Strong customer service focus with a commitment to user satisfaction. 5) Organizational Skills: a) Ability to manage multiple projects/activities and prioritize tasks effectively. b) Attention to detail in documenting activities and maintaining accurate records. 6) Work Experience: a) At least 10 years of relevant experience in the field of computer science or electronic engineering b) Very good knowledge in multiple areas of Software Engineering including some of the following: i. Requirements elicitation and management (including non- functional requirements for Operations & Maintenance); ii. Software change management and testing; iii. Secure Software design, implementation and testing; iv. Secure Software Engineering techniques and methodologies; v. Configuration management practices and tools; vi. Application Lifecycle Management concept and tools 7) Team Collaboration: a) Ability to work effectively as part of a team and share knowledge and resources. b) Willingness to collaborate with colleagues to solve complex issues. 8) Others: a) Candidate has strong customer relationship skills, including negotiating complex and sensitive situations under pressure. b) Candidate must have the nationality of one of the NATO nations. c) Candidate must possess a NATO Secret Security Clearance or national equivalent. d) Prior experience in an international environment comprising both military and civilian elements;

Working Location

• Braine-l'Alleud

Working Policy

• 50% Braine-l'Alleud, BE and 50% off-site

Travel

• Some travel to other NATO sites may be required

Security Clearance

• Valid National or NATO Secret personal security clearance