Senior Application & IT Security Support Engineer
Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.
Who we are supporting
The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.
The NCIA provides a wide range of services, including:
- Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
- Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
- Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
- Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
- Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.
Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.
The program
Assistance and Advisory Service (AAS)
The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.
To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.
Role ID – C005136
Role Duties and Responsibilities
Main Duties
1) COTS Application Support
a) Design and run PoCs; produce evidence-based recommendations covering cost, operational impact, lock-in and exit strategy.
b) Security architecture: define secure-by-design reference architectures, patterns and hardening baselines; review new and changed service designs at architecture gates.
c) Threat modelling and risk: lead threat modelling for new or materially changed services; own the technical risk register entries; propose proportionate mitigations and track remediation to closure.
d) Support deployment of server applications running on Windows or Linux;
e) Integrate applications with identity providers;
r) Support creation and deployment of client applications on end-user workstations.
g) Gathering and reporting metrics and Key Performance Indicators (KPIs)
h) Supporting in-service operations.
i) Support the operation of the assigned system(s) including:
- Systems operationally used by NATO Enterprise community;
- Local systems currently used by Local Commands;
- Atlassian Products management and configuration
- Maintenance of the operational & support environments;
- Monitoring performance of the assigned service applications;
- Support CIS Support Units (CSU) and other support staff for daily operations of the systems
2) Cloud Configuration (Azure, AWS)
a) Manage EntraID Groups and Roles
b) Manage and configure different Cloud components
3) AI related activities
a) Deployment, configuration and support of AI based solutions, tools and agents
b) Support of COTS applications-AI integration in production environments
c) Ongoing Monitoring of applications, and coordinating Maintenance
4) COTS End-User Support:
a) Troubleshoot and resolve complex software problems, ensuring efficient use of resources and problem resolution.
5) Incident Logging and Tracking:
a) Monitor the incident management process for tickets created in the helpdesk ticketing system.
b) Ensure all tickets are updated with accurate and detailed information and resolved within the agreed service levels.
6) Escalation:
a) Escalate complex issues to vendor support or appropriate teams when necessary.
b) Follow up on escalated issues to ensure timely resolution and user satisfaction.
7) Knowledge Base Management:
a) Contribute to the creation and maintenance of a knowledge base, documenting common issues and solutions.
b) Share knowledge and best practices with team members to improve overall service quality.
c) Contribute to analysis and documentation of new requirements and change requests.
d) Participate in review of documentation such as requirements definitions, software design (functional/technical analysis), systems specifications or other deliverables.
8) Technical:
a) Controlling, managing and providing access to the restricted areas managed by the business area.
b) Ensuring the proper functionality and security of software and hardware managed by NBAC.
c) Monitoring COTS Applications and other software managed by NBAC by identifying and reporting any problems with the infrastructure, hardware and software applications.
d) Providing support to NBAC team for security approval and accreditation of software applications and CIS.
e) Controlling and checking compliance with security regulations laid down by NCIA and NATO on the use of software and hardware which is part of the NBAC services.
f) Gathering functional and non-functional requirements, including drafting systems specifications.
g) Support technical reviews, walkthroughs and audits.
h) Support preparation of functional and technical specifications for software and hardware with special focus on the SSBA BA domain.
i) Support to change management, configuration management, release/deployment and testing.
9) Communication and Collaboration:
a) Work with and provide input to Service Delivery Managers, Project Managers, Portfolio Managers and other stakeholders
b) Collaborate with NCIA and vendors teams
Essential Skills, Experience and Certifications
1) Technical Proficiency:
a) Deep understanding of end-user devices (desktops, laptops, tablets, smartphones) running Windows OS, Android OS and Apple iPhones/iPads.
b) Expert knowledge of computing infrastructure – Linux, Windows and Active Directory.
c) Expert knowledge of Microsoft SQL Server 2019-2025 and IIS based web applications.
d) Very good understanding and experience with AI/LLM.
e) Deep understanding of networking infrastructure.
f) Very good knowledge of cloud technologies and cloud deployment for both AWS and Azure.
g) Deep understanding of PKI, certificate management, post- quantum migration.
h) Expert knowledge relevant to software engineering
. Technologies and standards (at least 4 of them): HTML5, REST & Web Services, XML, HTTP, SQL, Visual Basic for Applications;
ii. Identity Management (OAuth, OIDC, SAML2) application integration;
iii. Application server technologies and Relational Database Management Systems;
iv. Programming languages and platforms - .NET/C#, JAVA, JavaScript;
i) Deep understanding of security constraints and requirements in CIS.
j) Deep understanding of NCIA and NATO security directives and regulations, along with understanding of industry best practices and standards.
k) Familiarity with Microsoft services and tools, including Outlook, Teams, SharePoint.
l) Experience and good knowledge of at least the following COTS &am