C005524 Adversary Emulation Tool Management Support Service (NS) - THU 5 Nov

EMW; Henegouwen; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

EMW is seeking an experienced contractor to support the Adversary Emulation Tool Management at SHAPE, Mons, Belgium. The role involves system administration, security tooling, and ongoing monitoring to ensure high availability and compliance with NATO standards.

The candidate will document configurations, manage access, and implement automation. Strong English skills and security clearance are essential, with on-site presence during standard business hours.

Qualifications

• Active NATO SECRET clearance is required.
• Bachelor's degree or 6+ years of IT/security experience.
• 3+ years in IT security with focus on system administration and security tools management.
• Experience administering Linux systems (install/configure/update/patches).
• Docker container management and troubleshooting.
• Familiarity with ITIL, monitoring/reporting tools, and proxy management.

Responsibilities

• System administration, monitoring and reporting of Linux servers; maintain health checks and performance metrics.
• Document configurations, changes, and inventory; maintain IAM sources and external tools.
• Automation and scripting to improve efficiency; analyze trends and plan upgrades.

Skills

English proficiency

Analytical thinking

Security mindset

Education

Bachelor's degree in Computer Science / IT or related field

Tools

Docker

VMware

SolarWinds

Ansible

PowerShell

Linux server administration

Job description

Deadline Date: Thursday 5 November 2026

Requirement: Adversary Emulation Tool Management Support Service

Location: Braine-l'Alleud, BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 91

Required Start Date: 7 December 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Duties & Role:

Under the direction / guidance of the NCSC Point of Contact, a contractor's personnel will be the part of the NCSC Team supporting the following activities:

1) System administration, monitoring and reporting:

• Install, configure, update Linux operating systems,
• Manage user accounts, permissions and security,
• Configure network service (DNS, DHCP, NFS, SSH),
• Proactively review logs and alerts to identify any technical issues, errors, or failures in the monitoring process,
• Produce and distribute reports related to system health, monitoring activities, and compliance status (e.g., audit logs, system performance metrics).
• Daily: Verify the system is healthy (Check CPU, memory, disk usage, etc.), if not resolve the issues to make system up and running.
• Daily: Review logs for errors or anomalies.
• Daily: Respond quickly to outages or system alerts.
• Daily: Check ITSM and take an action for requests, changes and incidents

2) System Documentation:

• Document configuration and changes: Keep up-to-date documentation of all configurations, integration steps, troubleshooting procedures, and system maintenance tasks,
• Maintain an inventory: Keep track of all integrated identity sources, IAM systems, and external tools.
• Weekly: Do the maintenance (Schedule and apply updates, check system resources, etc.)
• Weekly: Periodically test backup restores to ensure data integrity.
• Weekly: Identify and resolve performance bottlenecks or capacity issues.

3) Automation and Scripting

• Improve system efficiency: Identify areas where automation could reduce manual intervention and improve operational efficiency.
• Monthly: Analyse trends in resource usage and plan for upgrades.
• Monthly: Ensure service levels are met; report to stakeholders.
• Monthly: Verify and update hardware/software inventory.

Specific Working Conditions: The contractor's personnel will be required to provide the service onsite in SHAPE, Mons / BEL. The services will be mainly executed on premise in SHAPE, Mons Belgium. Daily presence on SHAPE, Mons Belgium is expected to deliver according to performance goals. The service will be conducted during normal office hours (Monday to Thursday from 08h30 until 17h30 and Friday from 08h30 until 15h30) following the Mons/BEL calendar.

Travel: No travel expected. The contractor's personnel will not be required to travel to other NATO locations as part of his/her role. Regular travel costs to and from main location of the service (SHAPE) are out of scope and will be borne by the contractor's personnel. For exceptional travel, then it will be the responsibility of the contractor and the expenses will be reimbursed in accordance with Article 5.5 of AAS Framework Contract and within the limits of the NCIA Travel Directive. They will be invoiced separately to the purchaser by the service provider, in accordance with the terms and conditions of the framework agreement. These additional travel costs are considered an extra charge to the overall bid price

Skills, Knowledge & Experience:

Service Activities performed by a contractor's personnel include the lifecycle management of the Adversary Emulation software (including all tasks related to A2SL inclusion), its configuration to ensure coverage of all Adversary Emulation targets, and the regular monitoring of the availability of the capability.

They will act as tool management SME and must have strong proficiency in spoken and written English and must comply with these following requirements:

• The candidate must have a currently active NATO SECRET security clearance
• Bachelor's degree in Computer Science, Information Technology, or related field or at least 6 years of experience,
• 3+ years of relevant experience in IT security, with a focus on System Administration, Security Tools Management in large organisations.
• Relevant and proven experience acquired during the 3+ years time:
• Linux Systems administration(Install/configure/maintain Linux based servers, apply system updates/patches, monitor system performance/logs, manage users/permissions/settings of the platform),
• Docker management (maintain Docker containers, troubleshoot Docker based applications and volumes),
• Strong understanding of security best practices,
• IP switching and routing, experience in network troubleshooting
• Virtual Infrastructure understanding based on VMWare technologies,
• Good engineering skills including programming and/or scripting knowledge (python, shell scripting, PowerShell),
• Demonstrable experience of analysing and interpreting logs in order to diagnose faults and spot abnormal behaviours,
• Experience in Proxy management (Configure/maintain proxy, implement routing rules/access control),
• A good understanding of NATO organization and its IT infrastructure,
• A good understanding of Service Management, monitoring and reporting tools such as Solarwinds,
• A good understanding of ITIL Service Management,
• A good understanding of system instrumentation solutions such as Ansible,
• Certifications such as CISSP, CISM, or CISA, or equivalent,
• A good understanding of an international environment comprising both military and civilian elements.