Gateway Security Engineer — Cross-Domain Data Exchange for NATO with security clearance

Wlgroup; Henegouwen; Sur place; EUR 65 000 - 90 000; Plein temps

Résumé du poste

Wlgroup is seeking an engineer to join the gateway security team and own cross-domain boundary systems on-site near Mons. You will manage guards, data diodes, and related hardware/software, ensuring compliant data exchange across classifications.

The role requires 3+ years in cyber security or related field, strong Linux administration experience (Red Hat preferred), and scripting skills in Bash, Python, and Ansible. Certifications such as CISM/CISSP/GIAC are valued.

Qualifications

• Three years in cyber security or related field.
• Three years+ Linux system administration experience (Red Hat preferred).
• Scripting and automation with Bash, Python and Ansible.
• Experience with boundary protection devices such as firewalls and system hardening incl. SELinux.
• Proficient in network protocols, traffic analysis, TCP/IP, LAN/WAN architecture and troubleshooting.
• Certification such as CISM, CISSP or GIAC.
• Degree in a related discipline with three years of experience after it — or roughly ten years of progressive experience.

Responsabilités

• Administering and configuring guards and data diodes centrally, so cross-domain flows stay available and correct.
• Installing and configuring hardware and software, verifying configurations meet data exchange requirements.
• Adapting release markings and attachment handling, adding new flows, managing users and access.
• Monitoring performance and availability, and troubleshooting application faults to a resolution.
• Writing automation for repetitive administration tasks.
• Following patch releases, testing them, and installing them after approval.
• Documenting existing systems — procedures for repeat activities and proper documentation.
• Providing technical support to other teams and users when cross-domain exchanges fail.

Connaissances

Cyber security experience

Linux administration

Bash scripting

Python scripting

Ansible

Firewall & hardening (SELinux)

Network analysis (TCP/IP)

Boundary protection devices

Troubleshooting

Security certifications (CISM CISSP GI

Formation

Degree in a related discipline

Certifications (CISM/CISSP/GIAC)

Outils

Red Hat Enterprise Linux

Ansible

Description du poste

A multinational defence organisation moves data between networks of different classifications, and the equipment that makes that safe needs an engineer who understands both the boxes and the boundary they enforce. You would join the gateway security team and take central ownership of those systems.

What you would be doing

• Administering and configuring guards and data diodes centrally, so cross-domain flows stay available and correct.
• Installing and configuring hardware and software, verifying that each configuration really meets the data exchange requirement behind it.
• Adapting release markings and attachment handling, adding new flows, managing users and access.
• Monitoring performance and availability, and troubleshooting application faults to a resolution.
• Writing automation for the repetitive parts of administration.
• Following patch releases, testing them, taking them through the approval process and installing them.
• Documenting what exists — procedures for repeat activities and proper documentation for every system you implement.
• Providing technical support to other teams and to users when a cross-domain exchange fails.

What you would bring

• At least three years in cyber security or a closely related field.
• Three years or more of Linux system administration, Red Hat Enterprise Linux preferred.
• Scripting and automation with Bash, Python and Ansible.
• Experience with boundary protection devices such as firewalls, and with system hardening including SELinux.
• Network protocols and traffic analysis, TCP/IP services, LAN and WAN architecture, and the patience to troubleshoot a complex network security problem.
• A relevant certification such as CISM, CISSP or GIAC.
• A degree in a related discipline with three years of experience after it — or roughly ten years of progressive experience in this work instead.

The assignment is on-site near Mons.