IT Service Officer – Access Management - Contract Agent FGIV EEAS Headquarters – Job No 514948
EUBAM Libya
A complete application in a minute
Tailored resume and cover letter, ready to send.
Job summary
EEAS Headquarters in Brussels seeks a Senior IT Officer to lead IAM and PAM across a multi-application IT landscape. You will ensure governance, RBAC, and secure administration with hands-on operations and strong collaboration with stakeholders.
The successful candidate will drive provisioning, deprovisioning, and audit readiness, while improving automation and integration with AD/LDAP, SAP and ServiceNow.
Qualifications
- The candidate has university studies in IT or a related discipline.
- Proven senior-level experience in security operations, IAM/PAM in complex IT environments.
- Hands-on governance experience with RBAC and access reviews.
Responsibilities
- Design and implement PAM and IAM solutions aligned with security needs.
- Deploy provisioning workflows and integrate IAM/PAM with enterprise apps.
- Manage daily PAM/IAM operations, monitoring, and incident handling.
- Enforce least privilege, access reviews, and audit support.
- Coordinate with suppliers and manage projects related to IAM security.
Skills
Education
Tools
Job description
EEAS Headquarters, Brussels, Belgium
- Follow-up contract performance (deadlines, specifications, expenditure, etc.).
13.10.2026 New opportunity
The European External Action Service (EEAS) is the European Union’s diplomatic service. Since 2011, the EEAS carries out the EU’s Common Foreign and Security Policy (CFSP) to promote peace, prosperity, security, and the interests of the EU across the globe. It brings together European civil servants, diplomats from EU Member States, national experts and local staff worldwide.
The EEAS supports the High Representative in the exercise of her mandate to steer the Union’s CFSP, including the Common Security and Defence Policy (CSDP), to represent the EU on issues relating to the CFSP and to chair the Foreign Affairs Council. It also supports her as Vice‑President of the Commission with regard to her responsibilities within the Commission, including the coordination of other aspects of the EU’s external action. The EEAS works in close cooperation with the EU Member States, the General Secretariat of the Council, the services of the Commission and the Secretariat General of the European Parliament.
The EEAS Headquarters are in Brussels. It is also responsible for the management of the network of 145 Union Delegations and Offices worldwide. These Diplomatic Representations play a vital role in representing the EU in the country where they are based, in promoting the values and interests of the EU, and in building networks and partnerships. They are responsible for all policy areas of the relationship between the EU and the host country/organisation.
The main mission of the EEAS Digital Solutions division is to assist the EEAS and the worldwide network of Delegations in achieving its strategic objectives by supporting administrative and core business processes with modern Information and Communication Technology tools. SCS.5 is a multifaceted Division, including both EEAS staff and in‑house service providers, organised in four sectors: Governance & Policies, DevSecOPS & IT Operations, Cyber Security and Network Security.
The position of IT Service Officer - Access Management contract agent FGIV as per Article 3b of the Conditions of Employment of Other Servants of the European Union (hereafter, the "CEOS").
The IT Service Officer will support and strengthen access control, managing Identity and Access Management (IAM) and Privileged Access Management (PAM) within a complex, multi‑application and multi‑layer IT architecture.
The successful candidate will be responsible for the operational and governance aspects of privileged access and secure IT administration, including the analysis of access rights across diverse applications, evaluation of existing access management governance, and the implementation of improvements aligned with security and compliance requirements. The role requires a hands‑on operations profile, combining technical expertise with structured analysis and close collaboration with internal stakeholders and external service providers.
In addition to demonstrating very good analytical and organisational skills, the successful candidate will have to be pro‑active and be able to follow the procedures on an autonomous basis.
The ability to build and maintain good human relations within the teams and with our internal customers is essential. The selected candidate should demonstrate significant relevant experience.
Subject to having passed the CAST exam, the successful candidate will be offered a contract agent position (Function group IV), as per Article 3b of the CEOS, on the basis of a contract with an initial duration of one year. This contract may be successively renewed up to a maximum duration of six years, subject to the maximum duration of engagement by the EEAS allowed under successive limited duration contracts of different types.
EEAS Headquarters, Brussels, Belgium
Post available: immediately
The vacancy is to be filled in accordance with the conditions stipulated under the CEOS, in particular Article 82 thereof.
We are seeking a Senior IT Officer to support and strengthen access control, managing Identity and Access Management (IAM) and Privileged Access Management (PAM) within a complex, multi‑application and multi‑layer IT architecture.
- Design and implement PAM and IAM solutions aligned with business and security requirements.
- Deploy and configure provisioning workflows (Joiner / Mover / Leaver processes).
- Integrate IAM/PAM solutions with Active Directory / LDAP and enterprise applications (SAP, ServiceNow, databases, internal systems).
- Define access governance models and role-based access controls (RBAC).
- Participate in architecture reviews and security assessments.
- Implement automated identity provisioning processes.
- Ensure secure and timely deprovisioning of accounts and access rights upon termination or role change.
- Guarantee full removal of privileged access when no longer required.
- Prevent orphan, dormant, or shared accounts.
- Ensure compliance with Joiner/Mover/Leaver lifecycle controls.
- Perform regular reconciliation between IAM/PAM systems and target systems.
- Ensure daily operational support of PAM and IAM platforms.
- Monitor solution usage, privileged session activities, and access patterns.
- Analyse usage reports and detect anomalies or misuse.
- Ensure proper use of privileged access according to internal policies.
- Manage session recordings, password vaulting, and approval workflows.
- Produce periodic reports on access usage, privileged account activity, and compliance indicators.
- Support internal and external audits with usage evidence and logs.
- Handle incidents, service requests, and problem management.
- Perform upgrades, patches, and system hardening.
- Enforce least privilege and segregation of duties principles.
- Ensure compliance with internal security policies and regulatory frameworks.
- Conduct periodic access reviews and certifications.
- Participate in risk assessments and remediation plans.
- Monitor and remediate security vulnerabilities.
- Identify automation opportunities to reduce manual access management.
- Improve provisioning and deprovisioning processes.
- Strengthen monitoring and access governance maturity.
- Stay up to date with emerging cybersecurity threats and technologies.
- Manage projects/procurements related to the field of expertise.
- Prepare calls for tender (definition of terms of reference) and participate in the selection process.
- Follow‑up contract performance (deadlines, specifications, expenditure, etc.).
- Follow‑up sub‑contracted staff: work programme, workload, work organisation, schedules, priorities, review of deliverables.
- Ensure contract performance and fulfillment of reporting procedures when contracts are used during the implementation of projects.
- Actively participate and contribute in regular and ad‑hoc meetings and liaison with team, departmental and institutional colleagues as directed.
The job is a key position for an experienced technical IT Officer looking for a dynamic working environment and challenging projects within a friendly, motivated and supportive team. Main working language is English, French is a strong asset.
In Addition To The Conditions Set Out In Article 82 Of The CEOS And In The Commission Decision C(2017) 6760 Final , Which Is Applicable To The EEAS By Virtue Of The Decision ADMIN(2018) 4 Of The High Representative, Candidates Must
- have passed a valid EPSO CAST in FG IV, or be registered in the EPSO Permanent CAST for FG IV (https://eu-careers.europa.eu/en/contract-staff-selection-procedures-always-open-registration).
In the latter case, while the registration will make the candidate eligible for the selection procedure, the recruitment of a candidate on this vacant post will be subject to his/her successfully passing the CAST exam;
- have completed university studies of at least three years attested by a diploma;
- have the capacity to work in the languages of the CFSP and external relations (English and French) necessary for the performance of their duties;
- be a national of one of the Member States of the European Union and enjoy full rights as a citizen.
- A university degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related discipline, or an equivalent level of professional experience.
- Proven senior‑level professional technical experience in security operations, access management, or secure system administration within complex IT environments.
- Demonstrated hands‑on experience with:
- Privileged Access Management (PAM) and Identity Access Management (IAM) solutions
- Access rights analysis and review across applications and infrastructures
- Secure IT and local system administration with a strong security focus
- Experience in identity and access governance, role‑based access control, and accreditation processes is a strong asset;
- Proven experience in project implementation and follow‑up, as well as in the coordination of external suppliers and service providers.
- Strong analytical skills, with the ability to understand and assess complex IT architectures and access models;
- Hands‑on and methodical approach to security operations, including the ability to translate governance requirements into practical technical controls;
- Ability to manage sensitive and privileged information with a high level of integrity and discretion;
- Strong organisational skills and the ability to manage multiple priorities in a structured way;
- Clear and effective communication skills, enabling interaction with technical experts, application owners, auditors, and management.
- Ability to work effectively in a multicultural and international environment.
- Excellent knowledge of English (main working language).
- strong drafting and analytical skills combined with sound judgement;
- strong service attitude;
- be a flexible team player.
- professional certifications in IT Security;
- experience of working in a team in multi‑disciplinary and multi‑cultural environment;
- experience in working with or within other EU institutions;
- an existing or previous security clearance for SECRET UE/EU SECRET
would be considered as strong assets.
As a matter of policy, applications by individuals who have dual nationality, of which one of a non‑EU country, will be considered on a case‑by‑case basis taking account in particular of the functions attributed to the vacant post. The EEAS also examines if there could be a conflict of interest or security risks.
In this context, all candidates shall fill with their application a declaration of potential conflict of interest (see attached).
The signature of the contract will be subject to prior favourable opinion of the Medical Service, unless the successful candidate is a temporary agent currently employed in the EEAS.
<
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
