NATO offers you more than a job. It gives you a mission: building peace and security for one billion people in Europe and North America. The NATO Communications & Information Agency is leading NATO’s Digital Endeavour. We are NATO’s technology and cyber leaders, helping NATO Nations to communicate and work together in smarter ways. Our work is challenging and meaningful, and you will develop and apply your expertise as part of a dynamic international team of civilian and military professionals.

What do we offer?

·       Genuinely meaningful work as part of the most successful alliance in history

·       3 year contract with competitive tax-free salary and household and children’s allowances

·       Privileges for expatriate staff including expatriation and education allowances (where appropriate) and additional home leave

·       Excellent private health insurance scheme

·       Generous annual leave of 30 days plus official holidays

·       Pension Scheme

About the job

Based in Mons, Belgium you will join the Agency as we embark on a journey to transform our IT services to support NATO’s Digital Endeavour.

The NATO Cyber Security Centre (NCSC) is responsible for planning and executing all lifecycle management activities for cyber security. In executing this responsibility, NCSC provides specialist cyber security-related services covering the spectrum of scientific, technical, acquisition, operations, maintenance, and sustainment support, throughout the lifecycle of NATO Communications and Information Systems (CIS).

The IdM and PKI Services Cell is responsible for NATO Public Key Infrastructure (NPKI), which is a set of roles, policies, hardware, software and procedures managing the lifecycle of medium assurance asymmetric credentials. The NATO Public Key Infrastructure implements key management system capable of supporting a wide variety of Authentication, Integrity, Non-repudiation and Confidentiality services for the NATO Alliance.

You will install, setup and maintain the NATO Public Key Infrastructure (NPKI) systems, Hardware Security Module (HSM) and LDAP directory service and be responsible for PKI system backups, restore and regular upgrade. You will also cooperate with NATO PKI vendors in order to install, maintain and develop NATO PKI services as well as to resolve detected issues and provide technical support of CIS services and creation and maintenance of Standard Operating Procedures within the NPKI as part of modifications to current capabilities.

For the same team we have several roles open. For a full list of duties and requirements, please review the job descriptions here:

• Engineer (IdM and PKI Services)  – G15

• Principal Technician (IdM and PKI Services)  – G12

About you

We are looking for a talented and knowledgeable Engineer (IdM and PKI Services) with a Bachelor’s degree at a nationally recognised/certified University in a related discipline and 2 years of post-related experience.

A different qualification coupled with particularly relevant experience may also be considered.

You should also have:

·       At least 2 years of extensive experience in:

ü  operation and configuration of Information Security and Cryptography (symmetric and asymmetric encryption, public key infrastructure (PKI) encryption, hash functions, digital signatures, digital certificates, PKI system development, design and day-to-day management

ü  management of PKI CA (deployment, installation, configuration and maintenance)

ü  deployment, installation, configuration and maintenance of digital certificates auto-enrolment services and Smart Cards enrolment services

ü  maintenance and management of HSM

ü  management of CMS (Card Management System)

·       Experience in providing PKI training

·       Practical experience in Windows, Linux and VMware system administration

·       Practical experience with IT services automation e.g. Ansible

·       Knowledge of the principles of computer and communications security, networking, and vulnerabilities of modern operating systems and applications

·       Demonstrable experience of analysing and interpreting system, security and application logs in order to diagnose faults and spot abnormal behaviours of the NATO PKI CA and related services

·       Experience with SPLUNK Syslog server configuration

·       Experience as a user of SIEM and Log aggregation systems

·       Extensive experience in operating systems backup and restore

·       Practical experience in scripting (Python, PowerShell)

·       Extensive experience in SSL, TLS, and OpenSSL

Knowledge of English, both written and spoken, is essential.

To learn more about NCI Agency and our work, please visit our website.

The NATO Communications and Information Agency (NCI Agency) will not accept applications prepared, in whole or in part, by means of generative artificial-intelligence (AI) tools, including and without limitation to chatbots, such as Chat Generative Pre-trained Transformer (Chat GPT), or other language generating tools. All applications prepared, in whole or in part, by means of such generative or creative AI applications may be rejected without further consideration at the sole discretion of the NCI Agency.

Please note that ALL SELECTED CANDIDATES, with the exception of currently employed NATO International Civilians (NIC’s) will be appointed at the first Increment of the indicated NATO Grade, i.e. NATO Grade X, Increment 1.This is the salary referred to in this vacancy notice. Extra increments can only be considered for candidates from another Co-Ordinated Organisation.

Selected candidates who are not nationals of the host country and who have not been continuously resident in the host country for at least one year may be eligible for an expatriate allowance. For the purposes of determining continuous residence, NATO considers mainly the work location at the time recruitment started, independent of whether various ties were kept with the home country. For more information on our allowances click here.

All selected candidates are required to complete a Security Clearance, Medical Clearance and Pre-employment Screening process before joining the NCI Agency. This process will require time, so please keep in mind that you will not be able to start working with us right away.