[6469] Cloud Engineer

GardPass Consulting & Space; Brussel; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

GardPass Consulting & Space is seeking a cloud engineer to maintain and enhance NATO's cyber threat intelligence cloud platform (CTAB). The role focuses on secure, scalable AWS-based infrastructure, Terraform provisioning, and collaboration with data scientists, engineers, and end-users to deliver resilient cloud capabilities.

The candidate will ensure security, cost efficiency, and documentation quality, while supporting a transition from AWS to Azure and contributing in NATO project

Qualifications

• University degree in a quantitative discipline with significant systems engineering content and 2+ years of specific experience or 4+ years with certifications.
• Experience maintaining and developing multi-account AWS cloud environments.
• Experience with core AWS services: Lambda, S3, CloudTrail, ECS, EC2.
• Knowledge of AWS Well-Architected Framework.
• Experience using Terraform for infrastructure as code.
• Experience setting up CI/CD pipelines and automating containerised workloads on ECS.
• Experience with monitoring/logging/alerting tools such as CloudTrail and GuardDuty.
• Experience managing IAM including SSO, VPC networking and least-privilege controls.
• Proficiency in Python and Bash.
• Knowledge of Docker, Linux administration and Git.
• Strong written and verbal communication, able to explain technical topics to non-cloud specialists.
• Ability to collaborate with technical and non-technical stakeholders and produce clear documentation.
• English proficiency per AAS+ Framework Agreement.
• Desirable: cybersecurity/intelligence domain experience.
• Desirable: Microsoft Azure experience

Responsibilities

• Maintain and further develop CTAB's cloud environment supporting NATO's cyber threat intelligence platform.
• Ensure the cloud environment's availability, confidentiality and integrity.
• Provision, configure and monitor cloud resources using Terraform.
• Maintain cost-effective cloud infrastructure with well-documented code.
• Collaborate with data scientists, software engineers and end-users to translate requirements into cloud functionality.
• Prioritise security across cloud engineering and development tasks.
• Develop innovative cloud architecture, security, data flows and cost optimisation while ensuring stability and scalability.
• Develop automation pipelines for infrastructure provisioning and platform coding projects.
• Support transition from AWS to Azure cloud environment.
• Participate in team meetings and provide project updates.
• Produce specialist deliverables for task orders and quality reviews.
• Regularly validate deliverables with NATO Project Manager and CTAB colleagues.
• Attend reviews to ensure NATO expectations are met.
• Maintain quality control before submission for acceptance.

Skills

Communication & stakeholder management

Security & compliance awareness

Cloud engineering collaboration

Cloud security best practices

Python scripting

Bash scripting

Docker

Git

Education

University degree in a quantitative discipline

Tools

Terraform

AWS (Lambda, S3, CloudTrail, ECS, EC2)

Azure (desirable)

CI/CD tooling

Job description

• University degree from a nationally recognised/certified university in a quantitative discipline (e.g. Computer Science, Engineering, Statistics or Operations Research), with substantial systems engineering content and at least 2 years of specific experience; or at least 4 years of relevant experience supported by industry-recognised certifications.
• Knowledge and experience maintaining and developing multi-account AWS cloud environments.
• Experience with core AWS services, including Lambda, S3, CloudTrail, ECS and EC2.
• Knowledge of industry best practices, such as the AWS Well-Architected Framework.
• Significant experience using Terraform to build and maintain cloud infrastructure as code.
• Experience setting up CI/CD pipelines and automating containerised workloads on ECS.
• Experience with monitoring, logging and alerting tools such as CloudTrail and GuardDuty.
• Experience managing IAM, including SSO, VPC networking and least-privilege security controls.
• Proficiency in Python and Bash.
• Knowledge of Docker, Linux administration and Git.
• Strong written and verbal communication skills, including the ability to explain complex technical topics to non-cloud specialists.
• Ability to collaborate with technical and non-technical stakeholders, provide and receive feedback, and produce clear technical documentation.
• English proficiency in accordance with the AAS+ Framework Agreement requirements.
• Desirable Experience and Qualifications:
• Experience within the cybersecurity and/or intelligence domain.
• Experience with Microsoft Azure.

Start date: Negotiable

Clearance Required: NATO Secret

Location: Brussels, Belgium

Requirements

• University degree from a nationally recognised/certified university in a quantitative discipline (e.g. Computer Science, Engineering, Statistics or Operations Research), with substantial systems engineering content and at least 2 years of specific experience; or at least 4 years of relevant experience supported by industry-recognised certifications.
• Knowledge and experience maintaining and developing multi-account AWS cloud environments.
• Experience with core AWS services, including Lambda, S3, CloudTrail, ECS and EC2.
• Knowledge of industry best practices, such as the AWS Well-Architected Framework.
• Significant experience using Terraform to build and maintain cloud infrastructure as code.
• Experience setting up CI/CD pipelines and automating containerised workloads on ECS.
• Experience with monitoring, logging and alerting tools such as CloudTrail and GuardDuty.
• Experience managing IAM, including SSO, VPC networking and least-privilege security controls.
• Proficiency in Python and Bash.
• Knowledge of Docker, Linux administration and Git.
• Strong written and verbal communication skills, including the ability to explain complex technical topics to non-cloud specialists.
• Ability to collaborate with technical and non-technical stakeholders, provide and receive feedback, and produce clear technical documentation.
• English proficiency in accordance with the AAS+ Framework Agreement requirements.
• Desirable Experience and Qualifications:
• Experience within the cybersecurity and/or intelligence domain.
• Experience with Microsoft Azure.

Duties and Role

• Maintain and further develop CTAB's cloud environment, supporting the operation of NATO's cyber threat intelligence platform.
• Ensure the availability, confidentiality and integrity of the cloud environment.
• Provision, configure and monitor cloud resources using Terraform.
• Maintain cloud infrastructure in a cost-effective manner, ensuring code and work are maintainable and properly documented.
• Work with data scientists, software engineers, cyber threat researchers and end-users to translate requirements into cloud environment functionalities.
• Ensure security is prioritised throughout cloud engineering and development activities.
• Develop innovative approaches to cloud architecture, security, data flows and cost optimisation while maintaining stability, scalability and functionality.
• Develop automation pipelines for infrastructure provisioning, configuration and platform coding projects.
• Support the transition from an AWS-based cloud environment to an Azure-based cloud environment.
• Participate in team and branch meetings, providing updates on projects and relevant developments.
• Produce specialist deliverables in accordance with task orders and submit them for quality review, testing or inspection.
• Continuously validate deliverables with the NATO Project Manager and CTAB colleagues.
• Attend periodic review sessions to ensure deliverables meet NATO's expectations.
• Maintain appropriate quality control before submitting work for acceptance.

Specific Working Conditions

• Location: NATO Headquarters.
• Security clearance: NATO SECRET.
• Working arrangement: Expected minimum of 2 days per week on-site, with the remaining 3 days working remotely.
• Working hours: Normally 08:30–18:00 Monday to Thursday and 08:30–16:00 Friday when working at NATO sites.
• Occasional work outside normal working hours may be required.
• Occasional travel to other locations for project-related meetings may be required, with associated travel costs reimbursed.
• Leave must be agreed with the designated NATO Project Manager.
• NATO will provide a secure working environment and access to the CTAB cyber threat intelligence platform.
• The contractor must provide all other equipment and services required to perform the contract.