• Deadline Date: Friday 25 July 2025 • Location: Off-Site • Required Start Date: 1 September 2025 Deadline Date: Friday 25 July 2025 Requirement: Support for Cloud Security and Compliancy Location: Off-Site Not to Exceed: 2025 BASE: NTE € 4,252 / sprint for a total NTE € 76,545 (18 sprints) 2026 – 2027 – 2028 Options Period of Performance: 2025 BASE period:1 September 2025 Required Security Clearance: NATO SECRET Special Terms and Conditions: Non-disclosure undertaking to be signed Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria: Current National or NATO SECRET clearanceNationality of one of the NATO member countriesCurrent work visa for the specific location if applying for an in-country position Any applications that do NOT meet all the above – and do not CLEARLY show these on the CV - will be deleted. Introduction: • Supporting NATO throughout all its geographical locations, NCIA is looking for Support for Cloud Security and Compliancy, supporting the journey of NATO’s modernization of IT services, through leveraging the public cloud (Microsoft Azure, M365 and Amazon AWS), delivering managed, protected, security-centric and reliable IT Services. NCIA – Cloud Operations Team: • The NATO Communications and Information Agency (NCIA) is dedicated to supporting NATO's strategic objectives, including the ambitious NATO 2030 agenda. As part of this commitment, we are spearheading the modernization and digital transformation of NATO’s IT services. Our focus is on leveraging public cloud technologies like Microsoft 365 and Intune, incorporating a security-by-design approach, and ensuring a seamless transition to a modern, collaborative workplace environment. • To achieve these goals, we are building a Cloud Operations team under the Cloud Portfolio, operating under the NATO Enterprise Cloud Operating Model (NECOM) and under the guidance of the Cloud Center of Excellence (CCoE). The NECOM framework provides a standardized approach for cloud service management, ensuring • interoperability, scalability, and security across NATO's IT infrastructure. The Cloud Center of Excellence will serve as a hub for best practices, innovation, and expertise, driving the adoption and optimization of cloud technologies within NATO. This team will play a crucial role in our journey towards providing managed, protected, and reliable End User Services. • Embracing the latest technological advancements, this initiative will foster innovation and ensure NATO remains at the cutting edge of IT capabilities. By continuously evolving and integrating new technologies, we aim to enhance operational efficiency and readiness for future challenges. This remote support offers an exciting opportunity to be at the forefront of NATO's technological evolution and contribute to the security and efficiency of our operations. NCIA – Cloud Centre of Excellence (CCoE): • The Cloud Centre of Excellence (CCoE) within NCIA is focused on driving successful cloud adoption and maximizing the potential of cloud technologies across the organization. It serves as a central governing body, promoting best practices, enabling knowledge sharing, and ensuring alignment between business objectives and cloud initiatives. The CCoE supports various cloud-based solutions, ensuring their effective and efficient implementation and management. By fostering a culture of continuous improvement and innovation, the CCoE helps NCIA leverage cloud technologies to enhance operational efficiency, scalability, and agility. • The ideal service will offer expertise in Microsoft Defender, Sentinel, Purview, DLP, PowerShell scripting, Infrastructure as Code, Azure Policies, and Conditional Access Policies. • This service is crucial for maintaining a secure and efficient environment, supporting internal users, external collaborators, and third-party stakeholders. Qualifications: The Support for Cloud Security and Compliancy require an experienced Cloud Security and Compliancy Engineer with the following qualifications: • Technical Expertise (Minimum 5 years of experience): In-depth knowledge of Microsoft Defender products and services (i.e. Microsoft Defender XDR. Microsoft Defender for Endpoint, Microsoft Defender for office 365, Microsoft Defender for Identity, Microsoft Sentinel). Proficiency in scripting and automation tools (e.g., PowerShell, KQL). In-depth knowledge of Microsoft Purview for data governance. Experience in security monitoring and compliancy • Analytical and Problem-Solving Skills (Minimum 3 years of experience): Strong analytical skills to assess and improve security processes and workflows. Ability to troubleshoot complex security issues and implement effective solutions. • Security and Compliance Knowledge (Minimum 4 years of experience): Understanding of security best practices and compliance requirements. Experience conducting audits and ensuring adherence to regulatory standards. • Communication and Collaboration (Minimum 3 years of experience): Excellent communication skills to effectively collaborate with IT teams, stakeholders, and end-users.Ability to document processes clearly and provide training on Security and Compliancy tools and practices. • Organizational Skills (Minimum 3 years of experience): Strong organizational skills to manage multiple tasks and priorities effectively. Attention to detail in managing user accounts, groups, and access controls. • Team Collaboration (Minimum 2 years of experience): Ability to work effectively as part of a team and share knowledge and resources. Willingness to collaborate with colleagues to solve complex issues. Others: • The Contractor has strong customer relationship skills, including negotiating complex and sensitive situations under pressure. • Full proficiency in the English language. French language proficiency is of advantage.