Cyber Security Engineer (PKI & IAM) for NATO with security clearance

Would you like to join the leading international intergovernmental organization?

This is a comprehensive cyber security engineering role encompassing solution architecture, security engineering, information security, information assurance, and requirements management. The position requires a professional with extensive knowledge of security monitoring, PKI, vulnerability management, and identity and access management, alongside deep technical expertise in system and network security with a particular focus on Zero-Trust and Data-Centric architectures.

Responsibilities:

Solution Architecture:

• Contributes to the development of security policy-compliant architectures in AirC2 and related mission-support areas.

• Determines and documents architecturally significant decisions.

• Produces specifications of cloud-based or on-premises components, tiers and interfaces, for translation into detailed designs using selected services and products.

• Supports projects or change initiatives through the preparation of technical plans and application of design principles.

• Aligns solutions with enterprise and solution architecture standards (including security).

Security Engineering:

• Supports the configuration, testing and trouble-shooting of security products and services within the C2SS supported products and services

• Integration of local security services with centralized security infrastructure.

• Where no integration with centralized security infrastructure is possible, ensure that local infrastructure is configured to provide an equivalent service.

Information security

• Applies and maintains specific security controls as required by organisational policy and local risk assessments.

• Communicates security risks and issues to business managers and others.

• Contributes to the identification of risks that arise from potential technical solution architectures.

• Suggests alternate solutions or countermeasures to mitigate risks.

• Defines secure systems configurations in compliance with intended architectures.

• Supports investigation of suspected attacks and security breaches.

Information assurance

• Follows standard approaches for the technical assessment of information systems against information assurance policies and business objectives.

• Supports routine accreditation advice.

• Recognises decisions that are beyond their scope and responsibility level and escalates accordingly.

• Reviews and performs risk assessments and risk treatment plans.

• Identifies typical risk indicators and explains prevention measures.

• Maintains integrity of records to support and justify decisions.

Requirements definition and management

• Defines and manages scoping, requirements definition and prioritisation activities for small-scale changes and assists with more complex change initiatives.

• Follows agreed standards and applies appropriate techniques to elicit and document detailed requirements.

• Provides constructive challenge to stakeholders as required.

• Reviews requirements for errors and omissions.

• Prioritises requirements and documents traceability to source.

• Provides input to the requirements baseline.

• Investigates, manages and applies authorised requests for changes to baselined requirements, in line with change management policy.

Essential Qualifications & Experience:

Required:

• The service contractor will be required to have a Bachelor of Science (BSc) degree at a nationally recognised/certified university in a technical subject with substantial Information Technology (IT)

  content and 3 years post-related experience. As an exception, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that are of interest to the NCI Agency; namely, at least 5 years of extensive and progressive experience in the duties related to the functions of this post.

• Extensive knowledge and experience (at least 3 years) in the following areas:

1. Security monitoring, PKI, vulnerability management, identity and access management.

2. Researching and evaluating security products & technologies

3. Knowledge in system and network administration of UNIX and Windows systems

4. Technical knowledge in system and network security, with a particular focus on Zero-Trust and Data-Centric architectures.

• Ability to evaluate risks and formulate mitigation plans.

• Proven ability to write clear and structured technical reports (in English) including executive summary, technical findings and remediation plan for several different audiences.

Desired:

• Prior experience of working in an international environment comprising both military and civilian elements.

• Knowledge of NATO organization, internal structure and resultant relationships.

If you've read the description and feel this role is a great match, we'd love to hear from you! Click "Apply for this job" to be directed to a brief questionnaire. It should only take a few moments to complete, and we'll be in touch promptly if your experience aligns with our needs.