NSATU Cyber Boundary Protection Level 3 Support

Spektrum; Wiesbaden; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Travel opportunities

Job summary

Spektrum is hiring for a security-focused role in Wiesbaden, Germany. The candidate will contribute to NATO-related cybersecurity operations, including firewall administration, policy management, and incident response.

The role requires hands-on experience with Palo Alto firewalls, VPN technologies, and scripting for automation, within a multinational environment. On-site work in Wiesbaden with potential travel is expected.

Qualifications

• Minimum of three (3) years of professional experience in firewall administration and network security.
• English proficiency at good/minimum professional level per STANAG 6001.
• Strong interpersonal skills for multinational environments.

Responsibilities

• Support NSATU cyber security operations and maintenance activities.
• Configure and manage NGFW infrastructure and policy rules.
• Provide remote and on-site technical support to ensure service availability.
• Maintain system documentation and assist with incident management.

Skills

Firewall admin

Network security

Palo Alto

Security certifications

Tools

Palo Alto Firewalls

VPN technologies

Automation scripting

Job description

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – 2026-0067
Role Duties and Responsibilities
1 - NSATU Cyber Security and Boundary Protection Operations and Maintenance Activities: 3rd Level Technical Support: Supporting the delivery of advanced (3rd level)
technical support for NSATU NATO CIS Services and architecture and IT/Data
Management Services, ensuring service availability is maintained in accordance with defined
targets. Fault Diagnosis and Troubleshooting: Supporting fault diagnosis activities using the IT and Data
Management Services Management System, including both local and remote diagnostic
capabilities. Firewall and Infrastructure Maintenance: Supporting the supervision and execution of routine
maintenance activities for NGFW infrastructure, management systems, and associated
components. Firewall Configuration and Policy Management: Supporting the implementation, modification, and
validation of firewall rulesets and security policies, ensuring that all configuration changes are
properly assessed, documented, approved, and implemented in accordance with NATO processes
and cyber security requirements. System Documentation Management: Supporting the maintenance and updating of system
documentation to reflect changes, configurations, and operational procedures. Backup and Restore Operations: Supporting the execution and validation of backup and restore
procedures for IT and Data Management Services devices. Remote Support Capabilities: Supporting remote fault diagnosis and intervention activities as
required to ensure service continuity. Stakeholder Coordination: Supporting collaboration with internal and external
stakeholders to ensure effective coordination of support, maintenance, and service activities. Process Execution (ITSM): Supporting the execution of:
o Incident Management
o Change Management
o Release Management
2- Service Reporting Provide transparent and auditable evidence of service performance against defined KPIs; Enable continuous monitoring of service health, availability, and operational risks; Support informed decision-making by NCIA; Facilitate performance evaluation and validation of payment.
3- Service Governance Model Ensure effective oversight of engineering performance against defined KPIs. Provide a structured mechanism for reviewing service quality, risks, and issues. Enable timely decision-making and escalation. Support continuous service improvement. Ensure alignment with NATO governance frameworks and processes.
Essential Skills, Experience and Certifications A minimum of three (3) years of relevant professional experience in firewall administration and
network security, and shall demonstrate qualifications in the following areas:
o PaloAlto Networks Certified Network Security Engineer (PCNSE) or equivalent
qualification.
o CompTIA Security+ (pre 2020- Code SY0-601. Post 2020 Code SY0-701).
o In-depth knowledge of PaloAlto firewall configuration, management, and
troubleshooting.
o Understanding of networking protocols and security principles.
o In-depth knowledge of network infrastructure and architecture.
o Experience with security policy design and implementation.
o In-depth knowledge of VPN technologies and configurations.
o In-depth knowledge of scripting and automation skills
Listen, speak, read and write in English to or above the NATO SLP 3333 (= good/minimum professional) in
accordance with STANAG 6001. Proven English language ability to communicate effectively, both orally and in writing, including the ability
to deliver clear briefings and articulate complex technical matters;
Strong interpersonal skills, with the ability to work effectively in multinational and
multidisciplinary environments;
Ability to work autonomously with minimal supervision, while contributing effectively as part of a team;
Strong analytical and problem-solving capabilities, with a results-oriented approach;
Demonstrated ability to interact with users, stakeholders, and technical teams in a professional and
collaborative manner;
High level of motivation, adaptability, and professional integrity;
In depth practical understanding of NATO Command structures, roles, and organisational context
In depth practical Knowledge of NATO Enterprise Architecture and DCIS services, covering OSI Layers 1-7
Desirable Skills, Experience and Certifications PaloAlto Networks Certified Network Security Administrator (PCNSA). Certified Information Systems Security Professional (CISSP). Cisco Certified Network Associate (CCNA) - (Code 200-301)..
Working Location Wiesbaden, Germany
Working Policy On-site
Travel The Contractor shall be prepared to undertake travel in support of the services, which may
include, but is not limited to, NSATU functional locations and NCIA locations in Belgium and the
Netherlands. An estimated average of ten (10) trips per year is anticipated. Some travel to other NATO sites may be required
Security Clearance Valid National or NATO Cosmic Top Secret personal security clearance