Cloud Engineer

NextLink Group; Brussel Hoofdstad; On-site; EUR 70,000 - 95,000; Full time

Job summary

NextLink Group is seeking a Cloud Engineer to design, build and secure NATO CTAB cloud infrastructure. You will manage Terraform-based deployments, AWS services, and security controls while supporting a transition to Azure.

Close collaboration with software engineers and researchers is essential to deliver scalable, cost-efficient cloud capabilities. The role emphasizes architecture, automation, governance and documentation, with a focus on secure, scalable and compliant cloud solutions for a

Qualifications

• Bachelor's degree with substantial systems engineering content and 2+ years of relevant experience, or 4+ years with industry certifications.
• Hands-on experience with core AWS services and security-focused cloud design.
• Experience with Terraform for IaC, automation and repeatable deployments.

Responsibilities

• Design secure, scalable, cost-efficient cloud architectures aligned with security standards.
• Build and maintain IaC using Terraform for automated deployments.
• Administrate AWS services (Lambda, S3, CloudTrail, ECS, EC2, IAM) and manage access controls.
• Develop CI/CD pipelines to automate provisioning, deployment and configuration workflows.
• Support migration from AWS to Microsoft Azure, including planning and validation.
• Create automation scripts (Python/Bash) to streamline operations.
• Collaborate with engineers and researchers to translate requirements into cloud solutions.
• Document architectures, configurations and operational procedures.
• Identify opportunities to optimize cloud costs and resource utilization.

Skills

Cloud architecture

Terraform

AWS services

CI/CD

IAM & SSO

Linux

Docker

Git

VPC networking

Security best practices

Education

Bachelor's degree in Computer Science or related field

Industry certifications (AWS, Azure)

Tools

Terraform

AWS Lambda

Amazon S3

AWS CloudTrail

Amazon ECS

Amazon EC2

AWS IAM

SSO

Job description

Brussels (Belgium), Belgium | Posted on 11/04/2026

• Date Opened 11/04/2026
• City Brussels (Belgium)
• Job Posting ID ZR_4533_JOB

What is the mission about?

The Cloud Engineer will support NATO’s Cyber Threat Analysis Branch (CTAB) in designing, developing, maintaining and securing the cloud infrastructure that hosts NATO’s Cyber Threat Intelligence (CTI) platform. The role is focused on ensuring the availability, confidentiality, integrity, scalability and cost-effectiveness of the cloud environment while enabling reliable cyber threat intelligence production across the NATO Enterprise and Alliance.

Job Description

Job Overview

Nextlink is seeking an experienced Cloud Engineer to support NATO’s Cyber Threat Analysis Branch (CTAB) within the Joint Intelligence and Security Division (JISD). The successful candidate will be responsible for designing, developing, maintaining and securing the cloud infrastructure that hosts NATO’s Cyber Threat Intelligence (CTI) platform.

The role focuses on ensuring the availability, confidentiality, integrity, scalability and cost-effectiveness of NATO’s cloud environment while supporting the technical infrastructure required for cyber threat intelligence research and production.

The Cloud Engineer will work extensively with AWS cloud services, Infrastructure as Code (IaC), Terraform, CI/CD pipelines, containerization and cloud security technologies. The individual will also play a key role in supporting the transition from an AWS-based environment to Microsoft Azure, ensuring secure, efficient and scalable cloud infrastructure.

Working closely with software engineers, data scientists, cyber threat intelligence researchers and other technical stakeholders, the successful candidate will translate business and technical requirements into secure cloud solutions aligned with industry best practices and NATO security requirements.

Requirements

Key Responsibilities

• Cloud Architecture and Engineering: Develop secure, scalable, resilient and cost-effective cloud architectures, ensuring alignment with AWS Well-Architected Framework principles and relevant security standards.
• Infrastructure as Code (IaC): Build, provision, configure and maintain cloud infrastructure using Terraform, ensuring infrastructure deployments are automated, consistent, reusable and properly documented.
• AWS Cloud Services Administration: Manage and optimize core AWS services, including AWS Lambda, S3, CloudTrail, ECS, EC2 and other relevant cloud components.
• CI/CD Pipeline Development: Design, implement and maintain CI/CD pipelines to automate infrastructure provisioning, configuration management, software deployment and development workflows.
• Identity and Access Management: Manage AWS IAM, Single Sign-On (SSO), conditional access and role-based access controls, applying least-privilege security principles.
• Cloud Migration and Transformation: Support the transition from the existing AWS-based cloud environment to Microsoft Azure, contributing to migration planning, architecture design, infrastructure deployment and validation.
• Automation and Scripting: Develop and maintain automation solutions using Python and Bash to streamline infrastructure management, operational processes and configuration activities.
• Collaboration and Technical Support: Work closely with software engineers, data scientists, cyber threat intelligence researchers and end-users to translate technical requirements into secure and functional cloud capabilities.
• Documentation and Knowledge Management: Maintain accurate technical documentation covering cloud architecture, infrastructure configurations, deployment processes, security controls and operational procedures.
• Cost Optimization: Identify opportunities to optimize cloud resource utilization, improve infrastructure efficiency and reduce operational expenditure without compromising performance or security.
• Stakeholder Communication: Participate in technical meetings, provide regular project updates, communicate implementation progress and present technical solutions to both technical and non-technical stakeholders.

Bachelor's degree from a nationally recognised or accredited university in Computer Science, Engineering, Statistics, Operations Research or another relevant quantitative discipline with substantial systems engineering content, accompanied by at least two years of relevant experience; alternatively, a minimum of four years of relevant professional experience supported by industry-recognised certifications.

Hands-on experience with core AWS services, particularly:

• AWS Lambda
• Amazon S3
• AWS CloudTrail
• Amazon ECS
• Amazon EC2
• AWS IAM and related cloud services.

Significant experience using Terraform for Infrastructure as Code (IaC), infrastructure provisioning and cloud configuration management.

Practical experience configuring AWS IAM, SSO, VPC networking and least-privilege access controls.

Good knowledge of Linux administration, Docker and Git.

Understanding of cloud architecture, infrastructure scalability, availability, resilience and cost optimization.

Familiarity with industry best practices, particularly the AWS Well-Architected Framework.

Ability to translate complex technical requirements into practical and secure cloud engineering solutions.

Excellent written and verbal communication skills, with the ability to explain technical concepts to non-cloud specialists.

Ability to work collaboratively with multidisciplinary technical teams, provide constructive feedback and maintain clear technical documentation.