Senior Application & IT Security Support Engineer

Spektrum; Eigenbrakel; Hybride; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Hybrid work 50/50

Résumé du poste

Spektrum in Belgium seeks a seasoned IT professional to deliver COTS app support, security architecture, and cloud configurations across Azure and AWS. You will also lead threat modelling, manage identity integrations, and coordinate with NATO NCIA and vendor teams to keep complex systems secure and compliant.

The role requires hands-on experience with Windows/Linux servers, AI/LLM, and modern security practices, offering a challenging environment with broad responsibilities.

Qualifications

• Experience supporting COTS applications and enterprise IT infrastructure.
• Strong security architecture and threat modelling skills.
• Experience with cloud deployments (Azure/AWS).
• Knowledge of identity providers and access controls.

Responsabilités

• Provide COTS application support and PoCs.
• Define secure-by-design architectures and baselines.
• Lead threat modelling and risk management.
• Support deployment of Windows and Linux server apps.
• Integrate apps with identity providers.
• Manage cloud configurations and EntraID groups.
• Support AI-based solutions and AI integration.
• Monitor incidents and KPIs in ticketing systems.
• Collaborate with NCIA, vendors and service delivery teams.

Connaissances

Windows OS

Linux

Active Directory

Microsoft SQL Server

IIS

AI/LLM

Networking

AWS

Azure

PKI

Post-Quantum Migration

Software Engineering

Description du poste

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – C005136

RoleDuties and Responsibilities

Main Duties
1) COTS Application Support
a) Design and runPoCs; produce evidence-based recommendations covering cost, operational impact, lock-in andexit strategy.
b) Security architecture: define secure-by-design reference architectures, patterns and hardening baselines; review new and changed service designs at architecture gates.
c) Threat modelling and risk: lead threat modelling for new or materially changed services; own the technical risk register entries; propose proportionate mitigations and track remediation to closure.
d) Support deployment of server applications running on Windows or Linux;
e) Integrate applications with identity providers;
r) Support creation and deployment of client applications on end-user workstations.
g) Gathering and reporting metrics and Key Performance Indicators (KPIs)
h) Supporting in-service operations.
i) Support the operation of the assigned system(s) including:
- Systems operationally used by NATO Enterprise community;
- Local systems currently used by Local Commands;
- Atlassian Products management and configuration
- Maintenance of the operational & support environments;
- Monitoring performance of the assigned service applications;
- Support CIS Support Units (CSU) and other support staff for daily operations of the systems
2) Cloud Configuration (Azure, AWS)
a) ManageEntraIDGroups and Roles
b) Manage and configure different Cloud components
3) AI related activities
a) Deployment, configuration and support of AI based solutions, tools and agents
b) Support of COTS applications-AI integration in production environments
c) Ongoing Monitoring of applications, and coordinating Maintenance
4) COTS End-User Support:
a) Troubleshoot and resolve complex software problems, ensuring efficient use of resources and problem resolution.
5) Incident Logging and Tracking:
a) Monitor the incident management process for tickets created in the helpdeskticketing system.
b) Ensure all tickets are updated withaccurateand detailedinformation and resolved within the agreed service levels.
6) Escalation:
a) Escalate complex issues to vendor support orappropriate teamswhen necessary.
b) Follow up on escalated issues to ensuretimelyresolution anduser satisfaction.
7) Knowledge Base Management:
a) Contribute to the creation and maintenance of a knowledgebase, documentingcommon issues and solutions.
b) Share knowledge and best practices with team members to improve overall service quality.
c) Contribute to analysis and documentation of new requirementsand change requests.
d) Participate in review of documentation such as requirementsdefinitions, software design (functional/technical analysis), systemsspecificationsor other deliverables.
8) Technical:
a) Controlling,managingand providing access to the restricted areas managed by the business area.
b) Ensuring the proper functionality and security of software and hardware managed by NBAC.
c) Monitoring COTS Applications and other software managed by NBAC byidentifyingand reporting any problems with the infrastructure,hardwareand software applications.
d) Providing support to NBAC team for security approval and accreditation of software applications and CIS.
e) Controlling and checking compliance with security regulations laid down by NCIA and NATO on the use of software and hardware which is part of the NBAC services.
f) Gathering functional and non-functional requirements, including drafting systems specifications.
g) Support technical reviews,walkthroughsand audits.
h) Support preparation of functional and technical specifications for software and hardware with special focus on the SSBA BA domain.
i) Support to change management, configuration management, release/deploymentand testing.
9) Communication and Collaboration:
a) Work with and provide input to Service Delivery Managers, Project Managers, Portfolio Managers and other stakeholders
b) Collaborate with NCIA and vendors teams

EssentialSkills,Experienceand Certifications

1) Technical Proficiency:
a) Deep understanding of end-user devices (desktops, laptops, tablets, smartphones) running Windows OS, AndroidOSand Apple iPhones/iPads.
b) Expert knowledge of computing infrastructure – Linux,Windowsand Active Directory.
c) Expert knowledge of Microsoft SQL Server 2019-2025 and IIS based webapplications.
d) Very good understanding and experience with AI/LLM.
e) Deep understanding of networking infrastructure.
f) Very good knowledge of cloud technologies and cloud deployment for both AWS and Azure.
g) Deep understanding of PKI, certificate management, post- quantum migration.
h) Expert knowledge relevant to software engineering

Working Location

Working Policy

• 50% Braine-l'Alleud, BE and 50% off-site

Travel

• Some travel to other NATO sites may berequired

Security Clearance

• Valid National or NATOSecretpersonal security clearance