Network Engineer - Deployable Communication and Information Systems

Spektrum; Brunssum; On-site; EUR 60,000 - 110,000; Full time

Job summary

Spektrum is seeking an experienced network engineer to support NATO/NCI Agency projects in the Netherlands. You will configure enterprise routing, VPNs and secure tunnels, and ensure interoperability across DCIS kits and management platforms.

The role emphasizes UAT involvement, rigorous documentation, and adherence to security and governance policies while coordinating with NCIA and client teams onsite in Brunssum.

Qualifications

• Bachelor’s degree in Computer Science, IT, Engineering, or Telecommunications.
• At least five years in network engineering and related enterprise environments.
• Experience with Cisco routing and switching platforms.
• Knowledge of BGP, OSPF, IS-IS and MPLS routing.
• Experience with UAT, testing, and SOPs.
• Strong English communication and coordination skills.
• Familiarity with ITIL and security practices.

Responsibilities

• Configure DCIS kits and ensure components are compliant with NCIA designs and security requirements.
• Ensure consistent implementation via standardized configuration practices, testing, and documentation.
• Coordinate with NCIA personnel and other teams to meet project schedules and manage risks.
• Facilitate system integration by ensuring interoperability of network, Core Services and management systems.
• Support UAT and resolve routing, tunneling or authentication issues.
• Maintain governance and traceability per NCIA processes and procedures.
• Onboard devices into centralized management tools (ISE, CA Spectrum) and maintain system documentation.

Skills

Network engineering

Cisco routing

IPsec VPNs

Routing protocols

UAT testing

ITIL

English skills

Education

Bachelor's degree in Computer Science/IT/Engineering/Telecommunications

Tools

Cisco IOS-XE

Cisco NX-OS

CA Spectrum

Intermapper

Wireshark

SNMP

Job description

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – 2026-0118

Role Background

The NATO Integrated Mission Services Centre (NIMSC) is responsible for the coordination, planning, and delivery of engineering and operational support capabilities across Mobile CIS Infrastructure, including Deployable CIS Services (DCIS), Dispersible Systems, Highly Mobile Systems, SATCOM, and Wireless Communications. To ensure the sustained availability, performance, and resilience of these mission-critical capabilities, NIMSC requires structured, continuous Operations and Maintenance (O&M) support aligned with NATO governance, service management processes, and operational priorities.

Role Duties and Responsibilities

• Configure operationally ready DCIS kits by ensuring that all assigned network components are configured, integrated, and validated in accordance with approved technical designs, security requirements, and NCIA standards.
• Ensure consistent and high-quality implementation through the application of standardized configuration practices, rigorous testing, and comprehensive technical documentation.
• Support timely project delivery by executing assigned activities in accordance with the agreed project schedule, coordinating effectively with NCIA personnel and other delivery teams, and proactively managing technical dependencies and risks.
• Facilitate successful system integration by ensuring interoperability between the network infrastructure, Core Services, Boundary Protection capabilities, and supporting management systems within each DCIS kit.
• Enable efficient acceptance and deployment readiness by supporting User Acceptance Testing (UAT), resolving identified technical issues, and delivering complete and accurate technical documentation.
• Maintain governance and compliance by performing all activities in accordance with NCIA processes, security policies, configuration management procedures, and project governance requirements, ensuring full traceability and auditability throughout the delivery lifecycle.
• Advanced device configuration: Executing the end-to-end configuration of Cisco routing devices based strictly on provided configuration diagrams, ensuring accurate mapping of connectivity, ports, vlans, IP addresses, and subnets.
• Virtual routing and segmentation: Implementing virtual routing and forwarding (VRFs) to ensure strict, auditable protocol and traffic isolation across multiple security classifications.
• Routing protocol deployment: Configuring and optimizing dynamic routing protocols including IS-IS, OSPF, and BGP according to enterprise architecture standards.
• Secure Tunnel Establishment: Constructing, validating, and securing Generic Routing Encapsulation (GRE) and IPsec tunnels to facilitate secure remote transport.
• Remote hands and physical coordination: Collaborating with local support personnel to guide physical installation, verify cabling, and establish baseline physical connectivity.
• Management tool integration: Enrolling, configuring, and verifying all newly deployed devices within centralized management and monitoring tools, specifically Cisco Identity Services Engine (ISE) and CA Spectrum.
• System documentation management: Supporting the maintenance and updating of system documentation to reflect changes, configurations, and operational procedures.
• User Acceptance Testing (UAT) and Troubleshooting: Providing specialized technical support during UAT, including active fault diagnosis, troubleshooting, and resolution of routing, tunnelling, or authentication issues.

Essential Skills, Experience and Certifications

• A minimum of a Bachelor's degree from a nationally recognised university in Computer Science, Information Technology, Engineering, Telecommunications, or a related discipline, together with a minimum of two years of relevant professional experience; or equivalent education, professional qualifications, and demonstrable experience in enterprise network engineering.
• Alternatively, exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate’s particular abilities or experience that is/are of interest to NCI Agency, that is, at least 5 years extensive and progressive expertise in duties related to the function of the post.
• At least five (5) years of progressive professional experience in network engineering roles, including the design, implementation, configuration, integration, deployment, and support of enterprise network infrastructures.
• Experience delivering services within operational or project delivery environments.
• Experience supporting production network deployments, implementation projects, and technical exercises.
• Experience preparing technical documentation, test plans, implementation procedures, and Standard Operating Procedures (SOPs).
• Experience in configuration management practices and supporting tools.
• Design, implement, configure, and support scalable enterprise network routing infrastructures leveraging BGP, OSPF, IS-IS, and MPLS routing protocols.
• Configure and operate Cisco routing and switching platforms, including Cisco IOS-XE and Cisco NX-OS.
• Configure Layer 2 and Layer 3 network services.
• Configure and validate Virtual Routing and Forwarding (VRF), GRE tunnels, IPsec tunnels, MPLS Traffic Engineering, policy-based routing, route redistribution, route summarisation, HSRP, and other enterprise routing technologies.
• Configure data centre and switching technologies including STP, MSTP, Rapid PVST, EtherChannel, LACP, Virtual Stack, StackWise, and Cisco Nexus platforms.
• Configure Quality of Service (QoS) policies, including traffic classification, shaping, and policing.
• Configure and operate network monitoring and event management systems (e.g. Intermapper, CA Spectrum).
• Perform console and remote deployments, IOS software upgrades, configuration backup and recovery.
• Validate routing adjacencies, implementation activities, and end-to-end network connectivity.
• Perform implementation testing, User Acceptance Testing (UAT), and deployment validation.
• Troubleshoot implementation-related technical issues using tools such as Wireshark, NetFlow, and SNMP.
• Apply network security best practices, including ACLs, VPNs, IPSec, AAA, Role- Based Access Control, and security hardening.
• Produce implementation records, technical evidence, and supporting documentation.
• Knowledge of firewall technologies and enterprise security architectures.
• Knowledge of the ITIL IT Service Management framework.
• Excellent spoken and written English communication and presentation skills.
• Strong analytical and troubleshooting skills.
• Excellent written and verbal communication skills.
• A proactive and solution-oriented approach, with the ability to work autonomously and deliver results.
• The ability to coordinate effectively with NCIA personnel and other contractors.
• The ability to manage multiple priorities and perform effectively within agreed implementation schedules.
• Strong interpersonal skills to effectively interact with users, team members, and stakeholders.
• Knowledge of NATO responsibilities, structure, and organisational context.
• Latest virtualization technologies and modern operating systems.
• Operation and configuration of Cisco routing and switching elements.
• Operation and configuration of network automation or equivalent automation/orchestration systems.
• Configuration and operation of Network Monitoring Systems (e.g., Intermapper, CA Spectrum) and Event Management Systems.
• Support to exercises and operational activities.

The following qualifications are considered highly desirable:

• Active Cisco Certified Network Professional (CCNP) Enterprise or Service Provider certification.
• Familiarity with Thales TCE 621 family IP Cryptographic Equipment or equivalent military-grade IP encryption devices.

Working Location

• Brunssum, Netherlands

Working Policy

• 100% Onsite
• The services shall be performed during normal working hours, as follows:

Monday to Thursday: 08:30 – 17:30 (CET), Friday: 08:30 – 15:30 (CET)

Where required for operational reasons, the Contractor shall perform night work in support of the services. Such activities shall be planned and agreed in advance with NCIA. All night work shall be included within the Contractor’s price and shall not be subject to additional reimbursement.

NCIA shall provide access to necessary tools, data, and NATO networks, subject to applicable Agency policies, security authorisation, and coordination requirements.

Travel

• The Contractor shall be prepared to undertake travel that may include, but is not limited to, NCIA Europe locations. An estimated average of one (1) trip per month is anticipated and will not exceed 5 days; however, this estimate is indicative only and shall not constitute a commitment. The cost of such travel, including all associated travel and subsistence expenses, shall be included in the Contractor's price and shall not be subject to separate reimbursement.
• Extraordinary Travel, defined as travel requirements that involve destinations other than those identified above, shall be subject to prior written approval by NCIA. The cost of such travel and associated subsistence shall be reimbursed in accordance with Article 5.5 of the AAS+ Framework Contract, based on actual expenses and in line with NCIA processes. Such costs may be established via a contract amendment and through a separate Purchase Order line.
• All travel arrangements shall be the responsibility of the Contractor.

Security Clearance

• ValidNATO COSMIC TOP SECRET personal security clearance