NSATU Cyber Boundary Protection Level 3 Support

Brevco Services; Wiesbaden; On-site; EUR 75,000 - 110,000; Part time

Job summary

NCIA in Wiesbaden is seeking an experienced 3rd level security engineer to provide advanced support for NATO CIS services. You will diagnose faults, maintain NGFW infrastructure, and implement firewall policies in line with NATO processes. Strong scripting, VPN, and Palo Alto experience are required, with CISSP/CCNA advantageous.

The role emphasizes coordination with stakeholders, documentation, and ITSM practices to ensure high service availability and security across the network environment.

Qualifications

• 3+ years of firewall administration and network security experience with PCNSE or equivalent.
• In-depth Palo Alto firewall configuration, management and troubleshooting.
• Understanding of networking protocols and security principles.
• Experience with VPN technologies and security policy design/implementation.
• Scripting/automation skills and NATO command/architectural knowledge.
• Nice to have CISSP and CCNA certifications.

Responsibilities

• 3rd Level Technical Support for NATO CIS Services and IT/Data Management.
• Fault diagnosis using management systems with local and remote capabilities.
• Firewall and infrastructure maintenance for NGFW and related components.
• Configuration management and policy enforcement per NATO processes.
• Documentation maintenance reflecting changes and procedures.
• Backup and restore validation for IT devices.
• Remote fault diagnosis as required to ensure service continuity.
• Coordinate with internal/external stakeholders for service activities.
• Support ITSM processes, including Release Management.

Skills

Firewall administration

Network security

VPN technologies

Scripting and automation

IT security concepts

Education

PCNSE certification

CISSP (Nice to have)

CCNA (Nice to have)

Tools

Palo Alto firewalls

Security management systems

Networking infrastructure

Job description

NSATU Cyber Boundary Protection Level 3 Support

IT Services

Type

Contract

Country

Germany

City

Wiesbaden

Security

Needed

Company

NCIA

EXPERIENCE AND EDUCATION:

Essential Qualifications/Experience:

• 3+ years of relevant professional experience in firewall administration and network security, and shall demonstrate qualifications in the following areas:
• PaloAlto Networks Certified Network Security Engineer (PCNSE) or equivalent qualification
• In-depth knowledge of PaloAlto firewall configuration, management, and troubleshooting
• Understanding of networking protocols and security principles
• In-depth knowledge of network infrastructure and architecture
• Experience with security policy design and implementation
• In-depth knowledge of VPN technologies and configurations
• In-depth knowledge of scripting and automation skills
• In depth practical understanding of NATO Command structures, roles, and organisational context
• In depth practical Knowledge of NATO Enterprise Architecture and DCIS services, covering OSI Layers 1-7

Desirable Qualifications/Experience:

• 3+ years of experience in the following areas:
• PaloAlto Networks Certified Network Security Administrator (PCNSA)
• Certified Information Systems Security Professional (CISSP)

DUTIES/ROLE:

• 3rd Level Technical Support: Supporting the delivery of advanced (3rd level) technical support for NSATU NATO CIS Services and architecture and IT/Data Management Services, ensuring service availability is maintained in accordance with defined targets
• Fault Diagnosis and Troubleshooting: Supporting fault diagnosis activities using the IT and Data Management Services Management System, including both local and remote diagnostic capabilities
• Firewall and Infrastructure Maintenance: Supporting the supervision and execution of routine maintenance activities for NGFW infrastructure, management systems, and associated components
• Firewall Configuration and Policy Management: Supporting the implementation, modification, and validation of firewall rulesets and security policies, ensuring that all configuration changes are properly assessed, documented, approved, and implemented in accordance with NATO processes and cyber security requirements
• System Documentation Management: Supporting the maintenance and updating of system documentation to reflect changes, configurations, and operational procedures
• Backup and Restore Operations: Supporting the execution and validation of backup and restore procedures for IT and Data Management Services devices
• Remote Support Capabilities: Supporting remote fault diagnosis and intervention activities as required to ensure service continuity
• Stakeholder Coordination: Supporting collaboration with internal and external stakeholders to ensure effective coordination of support, maintenance, and service activities
• Process Execution (ITSM): Supporting the execution of:
• Release Management

Job requirements

All the mandatory requirements have to be met in order to apply.

• 3+ years of relevant professional experience in firewall administration and network security, and shall demonstrate qualifications in the following areas: PaloAlto Networks Certified Network Security Engineer (PCNSE) or equivalent qualification (Mandatory)
• In-depth knowledge of PaloAlto firewall configuration, management, and troubleshooting (Mandatory)
• Understanding of networking protocols and security principles (Mandatory)
• In-depth knowledge of network infrastructure and architecture (Mandatory)
• Experience with security policy design and implementation (Mandatory)
• In-depth knowledge of VPN technologies and configurations (Mandatory)
• In-depth knowledge of scripting and automation skills (Mandatory)
• In depth practical understanding of NATO Command structures, roles, and organisational context (Mandatory)
• In depth practical Knowledge of NATO Enterprise Architecture and DCIS services, covering OSI Layers 1-7 (Mandatory)
• Certified Information Systems Security Professional (CISSP) (Nice to have)
• Cisco Certified Network Associate (CCNA) - (Code 200-301) (Nice to have)