Application and CIS Security Senior Support Engineer

Duties

• Design and run PoCs; produce evidence-based recommendations covering cost, operational impact, lock-in and exit strategy.
• Security architecture: define secure-by-design reference architectures, patterns and hardening baselines; review new and changed service designs at architecture gates.
• Threat modelling and risk: lead threat modelling for new or materially changed services; own the technical risk register entries; propose proportionate mitigations and track remediation to closure.
• Support deployment of server applications running on Windows or Linux;
• Integrate applications with identity providers;
• Support creation and deployment of client applications on end-user workstations.
• Gathering and reporting metrics and Key Performance Indicators (KPIs).
• Supporting in-service operations.
• Support the operation of the assigned system(s) including: Systems operationally used by NATO Enterprise community; Local systems currently used by Local Commands; Atlassian Products management and configuration; Maintenance of the operational & support environments; Monitoring performance of the assigned service applications; Support CIS Support Units (CSU) and other support staff for daily operations of the systems.
• Manage EntraID Groups and Roles.
• Manage and configure different Cloud components.
• Deployment, configuration and support of AI based solutions, tools and agents.
• Support of COTS applications-AI integration in production environments.
• Ongoing Monitoring of applications, and coordinating Maintenance.
• Troubleshoot and resolve complex software problems, ensuring efficient use of resources and problem resolution.
• Monitor the incident management process for tickets created in the helpdesk ticketing system.
• Ensure all tickets are updated with accurate and detailed information and resolved within the agreed service levels.
• Escalate complex issues to vendor support or appropriate teams when necessary.
• Follow up on escalated issues to ensure timely resolution and user satisfaction.
• Contribute to the creation and maintenance of a knowledge base, documenting common issues and solutions.
• Share knowledge and best practices with team members to improve overall service quality.
• Contribute to analysis and documentation of new requirements and change requests.
• Participate in review of documentation such as requirements definitions, software design (functional/technical analysis), systems specifications or other deliverables.
• Controlling, managing and providing access to the restricted areas managed by the business area.
• Ensuring the proper functionality and security of software and hardware managed by NBAC.
• Monitoring COTS Applications and other software managed by NBAC by identifying and reporting any problems with the infrastructure, hardware and software applications.
• Providing support to NBAC team for security approval and accreditation of software applications and CIS.
• Controlling and checking compliance with security regulations laid down by NCIA and NATO on the use of software and hardware which is part of the NBAC services.
• Gathering functional and non-functional requirements, including drafting systems specifications.
• Support technical reviews, walkthroughs and audits.
• Support preparation of functional and technical specifications for software and hardware with special focus on the SSBA BA domain.
• Support to change management, configuration management, release/deployment and testing.
• Work with and provide input to Service Delivery Managers, Project Managers, Portfolio Managers and other stakeholders.
• Collaborate with NCIA and vendors teams.

Requirement

• At least 10 years of relevant experience in the field of computer science or electronic engineering.
• Very good knowledge in multiple areas of Software Engineering including some of the following: Requirements elicitation and management (including non-functional requirements for Operations & Maintenance); Software change management and testing; Secure Software design, implementation and testing; Secure Software Engineering techniques and methodologies; Configuration management practices and tools; Application Lifecycle Management concept and tools.
• Deep understanding of end-user devices (desktops, laptops, tablets, smartphones) running Windows OS, Android OS and Apple iPhones/iPads.
• Expert knowledge of computing infrastructure – Linux, Windows and Active Directory.
• Expert knowledge of Microsoft SQL Server 2019-2025 and IIS based web applications.
• Very good understanding and experience with AI/LLM.
• Deep understanding of networking infrastructure.
• Very good knowledge of cloud technologies and cloud deployment for both AWS and Azure.
• Deep understanding of PKI, certificate management, post-quantum migration.
• Technologies and standards (at least four of them): HTML5, REST & Web Services, XML, HTTP, SQL, Visual Basic for Applications;
• Identity Management (OAuth, OIDC, SAML2) application integration;
• Application server technologies and Relational Database Management Systems;
• Programming languages and platforms - .NET/C#, JAVA, JavaScript;
• Deep understanding of security constraints and requirements in CIS.
• Deep understanding of NCIA and NATO security directives and regulations, along with understanding of industry best practices and standards.
• Familiarity with Microsoft services and tools, including Outlook, Teams, SharePoint.
• Experience and good knowledge of at least the following COTS technologies: IIS, JBOSS, Apache Tomcat; .NET based applications.
• Extensive experience in deployment and management of client-server applications, application integration and data transformation for application integration;
• Evidence-driven and vendor-neutral; able to say "not yet" and defend the position.
• Strong technical skills to investigate, diagnose and resolve complex IT issues.
• Full proficiency in English.
• Prior experience in an international environment comprising both military and civilian elements;
• Candidate must have the nationality of one of the NATO nations.
• Candidate must possess a NATO Secret Security Clearance or national equivalent.

Preferences

• French language proficiency is of advantage.