C005231 Adversary Emulation Tool Management Support Service (CTS) - THU 8 Oct

EMW; Henegouwen; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

EMW in Mons, Belgium, seeks an on-site IT security and systems administrator to support Adversary Emulation tooling and NCSC activities. You will manage Linux servers, Docker containers, and VMware, monitor health, and maintain logs and reports.

A COSMIC TOP SECRET clearance and strong ITIL knowledge are required; the role includes monthly reviews and backups. Daily tasks include system health checks, incident response, and inventory maintenance, with a focus on automation and efficient

Qualifications

• Active NATO COSMIC TOP SECRET clearance.
• Bachelor's degree in Computer Science or Information Technology or 6+ years of experience.
• 3+ years in IT security with focus on system administration and security tools.
• Experience administering Linux, Docker, and VMware environments.
• Knowledge of ITIL and monitoring tools is required.

Responsabilités

• Administer Linux systems, apply patches, monitor health and performance.
• Manage users, permissions and security settings.
• Configure DNS, DHCP, NFS, and SSH services.
• Review logs, respond to outages, and address alerts quickly.
• Produce reports on system health and compliance status.
• Maintain documentation and inventory of identities and tools.
• Plan backups, test restores, and identify bottlenecks.
• Explore automation to reduce manual work and improve efficiency.

Connaissances

Linux Admin

Docker

Security best practices

Networking

VMware

Scripting

Log analysis

Proxy management

NATO IT infra

ITIL

Monitoring tools

Ansible

Security certifications

International environment

Formation

Bachelor's degree in CS/IT

6+ years experience

Outils

Solarwinds

VMware

PowerShell

Ansible

Description du poste

Deadline Date: Thursday 8 October 2026

Requirement: Adversary Emulation Tool Management Support Service

Location: Mons, BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 418

Required Start Date: 16 November 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO COSMIC TOP SECRET

Duties & Role

Under the direction / guidance of the NCSC Point of Contact, a contractor's personnel will be the part of the NCSC Team supporting the following activities:

• System administration, monitoring and reporting:
• Install, configure, update Linux operating systems,
• Manage user accounts, permissions and security,
• Configure network service (DNS, DHCP, NFS, SSH),
• Proactively review logs and alerts to identify any technical issues, errors, or failures in the monitoring process,
• Produce and distribute reports related to system health, monitoring activities, and compliance status (e.g., audit logs, system performance metrics)
• Daily: Verify the system is healthy (Check CPU, memory, disk usage, etc.), if not resolve the issues to make system up and running
• Daily: Review logs for errors or anomalies
• Daily: Respond quickly to outages or system alerts
• Daily: Check ITSM and take an action for requests, changes and incidents
• System Documentation:
• Document configuration and changes: Keep up-to-date documentation of all configurations, integration steps, troubleshooting procedures, and system maintenance tasks,
• Maintain an inventory: Keep track of all integrated identity sources, IAM systems, and external tools
• Weekly: Do the maintenance (Schedule and apply updates, check system resources, etc.)
• Weekly: Periodically test backup restores to ensure data integrity
• Weekly: Identify and resolve performance bottlenecks or capacity issues
• Automation and Scripting
• Improve system efficiency: Identify areas where automation could reduce manual intervention and improve operational efficiency.
• Monthly: Analyse trends in resource usage and plan for upgrades
• Monthly: Ensure service levels are met; report to stakeholders
• Monthly: Verify and update hardware/software inventory

Specific Working Conditions

The contractor's personnel will be required to provide the service onsite in SHAPE, Mons / BEL. The services will be mainly executed on premise in SHAPE, Mons Belgium. Daily presence on SHAPE, Mons Belgium is expected to deliver according to performance goals. The service will be conducted during normal office hours (Monday to Thursday from 08h30 until 17h30 and Friday from 08h30 until 15h30) following the Mons/BEL calendar.

Travel

No travel expected. The contractor's personnel will not be required to travel to other NATO locations as part of his/her role. Regular travel costs to and from main location of the service (SHAPE) are out of scope and will be borne by the contractor's personnel. For exceptional travel, then it will be the responsibility of the contractor and the expenses will be reimbursed in accordance with Article 5.5 of AAS Framework Contract and within the limits of the NCIA Travel Directive. They will be invoiced separately to the purchaser by the service provider, in accordance with the terms and conditions of the framework agreement. These additional travel costs are considered an extra charge to the overall bid price

Requirements

Skills, Knowledge & Experience:

Service Activities performed by a contractor's personnel include the lifecycle management of the Adversary Emulation software (including all tasks related to A2SL inclusion), its configuration to ensure coverage of all Adversary Emulation targets, and the regular monitoring of the availability of the capability.

• The candidate must have a currently active NATO COSMIC TOP SECRET security clearance
• Bachelor's degree in Computer Science, Information Technology, or related field or at least 6 years of experience,
• 3+ years of relevant experience in IT security, with a focus on System Administration, Security Tools Management in large organisations
• Relevant and proven experience acquired during the 3+ years time:
• Linux Systems administration(Install/configure/maintain Linux based servers, apply system updates/patches, monitor system performance/logs, manage users/permissions/settings of the platform),
• Docker management (maintain Docker containers, troubleshoot Docker based applications and volumes),
• Strong understanding of security best practices,
• IP switching and routing, experience in network troubleshooting
• Virtual Infrastructure understanding based on VMWare technologies,
• Good engineering skills including programming and/or scripting knowledge (python, shell scripting, PowerShell),
• Demonstrable experience of analysing and interpreting logs in order to diagnose faults and spot abnormal behaviours,
• Experience in Proxy management (Configure/maintain proxy, implement routing rules/access control),
• A good understanding of NATO organization and its IT infrastructure,
• A good understanding of Service Management, monitoring and reporting tools, such as Solarwinds,
• A good understanding of ITIL Service Management,
• A good understanding of system instrumentation solutions such as Ansible,
• Certifications such as CISSP, CISM, or CISA, or equivalent,
• A good understanding of an international environment comprising both military and civilian elements