4057 Application and CIS Security Senior Support Engineer

Contact One Communications, Inc.; Eigenbrakel; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Contact One Communications, Inc. seeks a Senior Application and CIS Security Support Engineer to lead COTS applications, cloud configuration (Azure, AWS), and AI-related deployments. You will design secure architectures, model threats, and support operations across NATO-centric environments.

You will coordinate with security teams, NBAC/CIS units, and vendors, ensuring secure software deployment and ongoing compliance while guiding incident response and knowledge-sharing initiatives.

Qualifications

• Extensive experience with end-user devices (Windows, Android, Apple).
• Deep knowledge of computing infrastructure (Linux/Windows, AD).
• Strong understanding of security directives and industry best practices.
• Experience with cloud deployments (AWS, Azure).
• Familiarity with PKI, certificates and post-quantum migration.
• Ability to design secure-by-design reference architectures and patterns.

Responsabilités

• Design and run PoCs; provide evidence-based recommendations.
• Lead threat modelling for new/changed services; manage risk entries.
• Support deployment of server applications on Windows or Linux.
• Integrate applications with identity providers; support client apps on workstations.
• Monitor incidents; ensure tickets are updated and resolved per SLAs.
• Collaborate with vendors and cross-functional teams.

Connaissances

End-user devices management

Cloud platforms

AI/LLM knowledge

Security & CIS

Networking infrastructure

PKI & cert management

Security design & patterns

English proficiency

Cross-functional collaboration

Threat modelling & risk

Outils

IIS

JBOSS

Apache Tomcat

.NET/C#

Java

SQL Server

Active Directory

Description du poste

4057 Application and CIS Security Senior Support Engineer

• Application and CIS Security
• COTS Application

Duties & Role:

Main Duties

1) COTS Application Support

• Design and run PoCs; produce evidence-based recommendations covering cost, operational impact, lock-in and exit strategy.
• Security architecture: define secure-by-design reference architectures, patterns and hardening baselines; review new and changed service designs at architecture gates.
• Threat modelling and risk: lead threat modelling for new or materially changed services; own the technical risk register entries; propose proportionate mitigations and track remediation to closure.
• Support deployment of server applications running on Windows or Linux;
• Integrate applications with identity providers;
• Support creation and deployment of client applications on end- user workstations.
• Gathering and reporting metrics and Key Performance Indicators (KPIs)
• Supporting in-service operations.
• Support the operation of the assigned system(s) including: Systems operationally used by NATO Enterprise community; Local systems currently used by Local Commands; Atlassian Products management and configuration; Maintenance of the operational & support environments; Monitoring performance of the assigned service applications; Support CIS Support Units (CSU) and other support staff for daily operations of the systems

2) Cloud Configuration (Azure, AWS)

• Manage EntraID Groups and Roles
• Manage and configure different Cloud components

3) AI related activities

• Deployment, configuration and support of AI based solutions, tools and agents
• Support of COTS applications-AI integration in production environments
• Ongoing Monitoring of applications, and coordinating Maintenance

4) COTS End-User Support:

• Troubleshoot and resolve complex software problems, ensuring efficient use of resources and problem resolution.

5) Incident Logging and Tracking:

• Monitor the incident management process for tickets created in the helpdesk ticketing system.
• Ensure all tickets are updated with accurate and detailed information and resolved within the agreed service levels.

6) Escalation:

• Escalate complex issues to vendor support or appropriate teams when necessary.
• Follow up on escalated issues to ensure timely resolution and user satisfaction.

7) Knowledge Base Management:

• Contribute to the creation and maintenance of a knowledge base, documenting common issues and solutions.
• Share knowledge and best practices with team members to improve overall service quality.
• Contribute to analysis and documentation of new requirements and change requests.
• Participate in review of documentation such as requirements definitions, software design (functional/technical analysis), systems specifications or other deliverables.

8) Technical:

• Controlling, managing and providing access to the restricted areas managed by the business area.
• Ensuring the proper functionality and security of software and hardware managed by NBAC.
• Monitoring COTS Applications and other software managed by NBAC by identifying and reporting any problems with the infrastructure, hardware and software applications.
• Providing support to NBAC team for security approval and accreditation of software applications and CIS.
• Controlling and checking compliance with security regulations laid down by NCIA and NATO on the use of software and hardware which is part of the NBAC services.
• Gathering functional and non-functional requirements, including drafting systems specifications.
• Support technical reviews, walkthroughs and audits.
• Support preparation of functional and technical specifications for software and hardware with special focus on the SSBA BA domain.
• Support to change management, configuration management, release/deployment and testing.

9) Communication and Collaboration:

• Work with and provide input to Service Delivery Managers, Project Managers, Portfolio Managers and other stakeholders
• Collaborate with NCIA and vendors teams

Requirements

Skills, Knowledge & Experience:

• Deep understanding of end-user devices (desktops, laptops, tablets, smartphones) running Windows OS, Android OS and Apple iPhones/iPads.
• Expert knowledge of computing infrastructure - Linux, Windows and Active Directory.
• Expert knowledge of Microsoft SQL Server 2019-2025 and IIS based web applications.
• Very good understanding and experience with AI/LLM.
• Deep understanding of networking infrastructure.
• Very good knowledge of cloud technologies and cloud deployment for both AWS and Azure.
• Deep understanding of PKI, certificate management, post-quantum migration.
• Expert knowledge relevant to software engineering: Technologies and standards (at least 4 of them): HTML5, REST & Web Services, XML, HTTP, SQL, Visual Basic for Applications; Identity Management (OAuth, OIDC, SAML2) application integration; Application server technologies and Relational Database Management Systems; Programming languages and platforms - .NET/C#, JAVA, JavaScript;
• Deep understanding of security constraints and requirements in CIS.
• Deep understanding of NCIA and NATO security directives and regulations, along with understanding of industry best practices and standards.
• Familiarity with Microsoft services and tools, including Outlook, Teams, SharePoint.
• Experience and good knowledge of at least the following COTS technologies: IIS, JBOSS, Apache Tomcat; .NET based applications;
• Extensive experience in deployment and management of client-server applications, application integration and data transformation for application integration;
• Evidence-driven and vendor-neutral; able to say "not yet" and defend the position.
• Strong technical skills to investigate, diagnose and resolve complex IT issues.
• Excellent verbal and written communication skills.
• Full proficiency in English. French language proficiency is of advantage.
• Ability to communicate technical information to non-technical users in a clear and concise manner.
• Ability to work in cross-functional application management/deployment teams.
• Strong customer service focus with a commitment to user satisfaction.
• Ability to manage multiple projects/activities and prioritize tasks effectively.
• Attention to detail in documenting activities and maintaining accurate records.
• At least 10 years of relevant experience in the field of computer science or electronic engineering
• Very good knowledge in multiple areas of Software Engineering including some of the following: Requirements elicitation and management (including non-functional requirements for Operations & Maintenance); Software change management and testing; Secure Software design, implementation and testing; Secure Software Engineering techniques and methodologies; Configuration management practices and tools; Application Lifecycle Management concept and tools
• Ability to work effectively as part of a team and share knowledge and resources.
• Willingness to collaborate with colleagues to solve complex issues.
• Candidate has strong customer relationship skills, including negotiating complex and sensitive situations under pressure.
• Candidate must have the nationality of one of the NATO nations.
• Candidate must possess a NATO Secret Security Clearance or national equivalent.
• Prior experience in an international environment comprising both military and civilian elements;