Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting 

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – C004843

Role Duties and Responsibilities

• Design, build, and evolve highly scalable, secure, and resilient Kubernetes platforms utilizing SUSE Rancher as the central management plane.
• Handle the end-to-end lifecycle of RKE/RKE2 clusters (provisioning, scaling, patching and upgrading) across hybrid, multi-cloud or bare-metal environments with minimal to zero downtime.
• Develop and maintain automated CI/CD pipelines and implement GitOps workflows (using tools like Gitlab, ArgoCD or Rancher Fleet) to streamline continuous application delivery.
• Monitor platform health using tools like Prometheus and Grafana, respond to system alerts and troubleshoot complex containerized workload issues.
• Enforce security policy's, including network policies, Rancher RBAC configurations and automated container image scanning.
• Proactively monitor resource utilization (CPU, memory, persistent storage) to right-size clusters, scale nodes dynamically and optimize cloud or on-prem infrastructure.
• Create and maintain technical documentation, including runbooks and architecture diagrams.

Essential Skills, Experience and Certifications

• Minimum of 4 years of dedicated, hands-on experience in DevOps or Platform Engineering roles.
• Over 4 years of sustained experience designing, deploying and maintaining highly available production Kubernetes clusters, heavily utilizing the SUSE Rancher ecosystem.
• A solid track record of leading complex migrations, moving legacy virtualized applications into containerized, microservice-based architectures.
• Expertly provision, secure, and lifecycle-manage large-scale, multi-cluster Kubernetes environments using SUSE Rancher UI/API and Rancher Manager.
• Write modular, reusable code to automate infrastructure provisioning across hybrid environments using Ansible.
• Architect and maintain sophisticated, zero-downtime deploymentpipelines using GitOps principles with Gitlab, ArgoCD or Rancher Fleet.
• Author/manage advanced Helm charts and manage complex stateful and stateless deployments.
• Engineer comprehensive monitoring and logging stacks (Prometheus, Grafana, ELK) to establish SLIs/SLOs and configure automated remediation. Experience with Rancher Observability is a plus.
• Develop robust automation scripts in Python or Bash.
• Rapidly diagnose and resolve high-severity incidents across the entire stack, from kernel-level container issues to complex network routing failures.
• Comprehensive understanding of the underlying architectures of RKE, RKE2, K8S /K3s and knowing exactly when to apply each distribution.
• Knowledge of zero-trust models, Rancher RBAC, Pod Security Admissions, container scanning and enforcing governance.
• CNIs tools (Calico, Cilium, Canal) deep understanding of Software Defined Network and Container Networking, network policies and managing complex Ingress and Service Mesh (Istio)architectures.
• Expert knowledge of Container Storage Interfaces (CSI), disaster recovery planning and managing highly available storage solutions like SUSE Longhorn.
• Extensive practical experience operating distributed Kubernetes environments across a mix of bare-metal, on-premises hypervisors (vSphere, Nutanix), and public clouds (AWS, Azure, GCP).
• Experience acting as a technical escalation point, guiding junior team members, and establishing DevOps best practices across development teams.

Working Location

• Brane-l’Alleud, Belgium

Working Policy

• Onsite

Travel

• Some travel to other NATO sites may be required

Security Clearance

• Valid National or NATO Secret personal security clearance

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting 

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – C004235

Role Duties and Responsibilities

Systems design

• Follows standard approaches and established design patterns to create new designs for simple systems or system components.
• Identifies and resolves minor design issues.
• Identifies alternative design options and seeks guidance when deviating from established design patterns.

Network design

• Specifies the technical configurations and components required for a small network or a network segment in a more complex infrastructure.
• Follows organisational architectures and standards.

Systems integration and build

• Defines the software modules needed for an integration build and produces a build definition for each generation of the software.
• Accepts completed software modules, ensuring that they meet defined criteria.
• Produces software builds from software source code for loading onto target hardware.
• Configures the hardware and software environment as required by the system being integrated.
• Produces integration test specifications, conducts tests and records and reports on outcomes.
• Diagnoses faults and records and reports on the results of tests.
• Produces system integration reports.

Network support

• Maintains the network support process and checks that all requests for support are dealt with according to agreed procedures.
• Ensures network configurations are applied to meet operational requirements in line with agreed procedures.
• Uses network management software and tools to investigate and diagnose network problems, collect performance statistics and create reports

Additional duties for this post:

• Network Design & Implementation – Plan, configure, and deploy routing protocols (e.g., OSPF, BGP, IS-IS).
• LA/WAN Optimization – Optimize routing tables and traffic flow for performance and redundancy.
• Troubleshooting & Support – Diagnose and resolve routing issues, including latency, congestion, and failures.
• Security & Compliance – Implement route filtering, prefix lists, and security policies to prevent unauthorized access.
• Capacity Planning – Monitor network usage and plan for scalability and growth.
• Documentation & Reporting – Maintain network diagrams, change logs, and incident reports.
• Collaboration – Work with other teams (e.g., security, data centre, cloud) to ensure seamless connectivity.
• Software & Firmware Management – Upgrade and patch routers to maintain security and stability.
• Testing & Lab Work – Conduct network simulations and testing before deploying changes.
• On-Call Support – Be available on a rotating basis for after-hours network incidents and escalations.
• Enterprise Security Operations Center Rotation – Take assigned shifts in the ESOC to monitor and manage network operations in real-time

Essential Skills and Experience

• Hands-on experience with the designing, implementing, and maintaining the core network architecture for large organizations.
• Practical experience configuring, troubleshooting and optimizing routers, switches, firewalls, and other hardware/software networking elements.
• CCNA Routing and Switching or similar training/certification At least 2 years practical experience with the designing, implementing, and maintaining the core network architecture for large organizations.
• Good practical experience configuring, troubleshooting and optimizing routers, switches, firewalls, and other hardware/software networking elements.

Knowledge and experience of the following domains:

• Routing and Protocol Expertise: Proficiency in dynamic routing protocols (OSPF, BGP, IS-IS) and traffic engineering techniques, with a strong foundation in IPv4/IPv6 networking. MPLS, IPv6, Segment Routing, QoS.
• SD-WAN and Network Virtualization: Hands-on experience deploying, managing, and optimizing SD-WAN solutions for modern enterprise environments. Software Defined (SDx) (e.g. SDN, SD-WAN, SDDC, SASE) Network Functions Virtualization (NFV)
• Troubleshooting and Automation: Advanced troubleshooting skills combined with knowledge of network automation tools (e.g., Python, Ansible) for efficient configuration and monitoring.
• Prior experience of working in an international environment comprising both military and civilian elements
• Knowledge of NATO responsibilities and organization, including ACO and ACT.
• Cisco or other network manufacturer certifications are welcome.
• Good communication and interpersonal skills.
• Good analytical skills and problem-solving attitude.

Specific Working Conditions

• Take assigned shifts in the ESOC to monitor and manage network operations in real-time.

Working Location

• Braine l’Alleud, Belgium

Working Policy

• On-Site

Travel
•    Up to 100 travels between NATO sites in Belgium (Braine l’Alleud, Mons, Brussels)

Security Clearance
•    Valid National Top Secret or NATO Cosmic Top Secret personal security clearance

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting 

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

1. Linux Function
   1. Essential Skills
      1. 5+ years of experience in managing and patching Linux environments, specifically RHEL and OEL.
   2. Responsibilities:
      1. Patching all Linux-based systems including Red Hat Enterprise Linux (RHEL) and Oracle Enterprise Linux (OEL) across all NATO locations.
      2. Utilizing tools like Ansible and Oracle Linux Manager (OLM) for patch management and deployment.
      3. Ensuring patches are thoroughly tested before deployment
      4. Conducting post-patch validation to ensure system stability and performance
2. Network Function
   1. Essential Skills
      1. 5+ years of experience in network administration and patch management, particularly with Load Balancers.
   2. Responsibilities:
      1. Patching and managing network-related devices, such as Load Balancers (Riverbed Stingray, Pulse Secure) across various NATO locations
      2. Ensuring that network patches are tested and validated before deployment.
      3. Troubleshooting any issues arising from patching network devices.
      4. Ensuring compliance with network security policies.

1. VMWARE Function
   1. Essential Skills
      1. 5+ years of experience with VMware technologies, including ESXi and vCenter.
   2. Responsibilities:
      1. VMware ESXi servers and VMware vCenter management platforms across all NATO locations.
      2. Applying patches to VMware environments, ensuring minimal downtime and maintaining high availability.
      3. Conducting pre-patch tests and post-patch validation to ensure stability and performance.

1. Hardware Function
   1. Essential Skills
      1. 5+ years of experience in managing and maintaining enterprise-level hardware systems.
   2. Responsibilities:
      1. Patching and upgrading firmware on physical hardware including HPE Rackmount and Blade Servers, Dell Servers, and associated storage systems across various NATO locations.
      2. Ensuring all hardware is compliant with the latest security and operational updates.
      3. Conducting pre-patch validation and post-patch testing to ensure hardware stability.

 Working Location

• Braine-l'Alleud, Belgium

Working Policy

• 100% On-Site, out of hours work is required

Travel

• Some travel to other NATO sites may be required

Security Clearance

• Valid National or NATO Secret personal security clearance

Summary

Are you passionate about IT, technology, and cybersecurity? Do you enjoy working on projects and system configuration along with the variety of general IT work? We're seeking a talented System Administrator to join our growing IT team.

In this role, you'll primarily focus on IT projects such as setting up, monitoring, and maintaining our systems, services, and networks, as well as managing security tools and responding to events. As a shared responsibility with the team, you'll support employees, help with onboarding, and maintain an office IT presence. This role requires being in the office 4 days per week.

Responsibilities

As an IT System Administrator, your three main focus areas will be:

Operational: Ensure the reliable operation of our IT systems and networks. Manage configurations, infrastructure, and integrations, and implement improvements to keep systems stable and efficient.

Support: Maintain an office IT presence, provide hands-on support for employees, and manage onboarding/offboarding processes including hardware and account setup. Act as the go-to contact for technical assistance.

Security & Compliance (Contribution): Contribute to security by applying patches, managing access controls, monitoring events, and supporting vulnerability remediation. Assist in audits, access reviews, and compliance initiatives in collaboration with the security team.

Core Operational & Support

You will primarily be responsible for:

• Managing and maintaining our on-premise IT infrastructure, including servers, networks, and related to hardware/software
• Supporting and administering cloud-based services and integrations 
• Monitoring system performance, troubleshoot issues, and resolving issues to minimize downtime
• Overseeing device management systems (MDM) for laptops, servers, and mobile devices
• Providing technical support for employees (hardware, software, and network) both on-site and remote
• Executing onboarding and offboarding tasks, including account provisioning and hardware setup
• Planning and implementing upgrades, migrations, and system enhancements
• Tracking and managing IT assets, hardware inventory, and software licenses
• Maintaining and building accurate documentation of system configurations, processes, and procedures

Security & Compliance (Contribution)

You will contribute to and collaborate on:

• Managing and testing backups, disaster recovery, and business continuity procedures
• Implementing security measures such as access controls, patch management, and event logging
• Supporting identity and access management (IAM) practices in collaboration with IT/security leads
• Helping to prepare for audits, compliance checks, and access reviews
• Coordinating with teams on vulnerability management and incident response
• Providing input on vendor assessments and service provider reviews

Systems & Tools

You'll work with cloud platforms (Google Cloud Platform), on-premise infrastructure (Proxmox virtualization on Dell servers and Mac hardware, a lot of smartphones), containerization (Docker for services and builds), device management tools (Microsoft Intune, NinjaOne, Mosyle), automation technologies (Python-based codebases, Ansible), and collaboration tools (Slack, Google Workspace). You'll support a diverse environment where employees use Linux, macOS, and Windows.

Profile

The successful candidate has:

• 3+ years of hands-on experience in system administration and IT support
• Bachelor's degree in Computer Science, Information Technology, or a related field
• Strong knowledge of operating systems (Windows, Linux, and macOS), server administration, and virtualization technologies
• Experience managing IT infrastructure including servers, networks, and storage systems
• Familiarity with security principles, including access controls, patch management, and security audits
• Proficiency in network configuration and troubleshooting (TCP/IP, DNS, DHCP)
• Knowledge of scripting languages (e.g., Python) and automation tools
• Strong problem-solving skills and ability to troubleshoot complex technical issues
• Excellent communication and interpersonal skills to work effectively with employees at all levels
• Detail-oriented, organized, and able to manage multiple priorities
• Collaborative team player with a continuous learning mindset
• Fluent in English

Nice to have:

• Relevant certifications (e.g., CompTIA A+/Network+/Security+, or similar)
• Experience with Docker and containerization
• Knowledge of security frameworks (e.g., ISO 27001, CIS)
• Experience with Google Workspace and cloud-based device management

What Guardsquare offers you

• A full-time job with a competitive salary package.
• You are provided with the tools & flexibility to develop yourself successfully.
• An international environment where you will interact with motivated & open colleagues from different backgrounds.
• A workplace where you can share and implement your ideas.
• A hybrid work policy, which helps guarantee an excellent work-life balance.

At Guardsquare, we take pride in being a diverse and multicultural company with team members representing numerous nationalities. We value different perspectives and opinions throughout the business which has contributed to our being the market leader in mobile application security. 

You will be part of a dynamic team that strives for excellence and focuses on continuous education and enhancement in skills. We encourage & empower our trusted colleagues to share their opinions, actively collaborate, and continue to learn and grow.

So, what are you waiting for? Join us! 

You can apply for this opportunity by filling out the application form below! 

About Guardsquare

Guardsquare offers the most complete approach to mobile application security on the market, delivering the highest level of protection, with ease. Guardsquare integrates seamlessly across the full development cycle, from mobile app security testing and code hardening to real-time threat detection and app attestation. Guardsquare provides enhanced mobile application security across the entire development process.
More than 975 customers worldwide across all major industries rely on Guardsquare to help them identify security risks and protect their mobile applications and SDKs against reverse engineering and tampering in the ever-evolving threat landscape.

Guardsquare is based in Leuven (Belgium), with offices in Gent (Belgium), Boston (USA) and Munich (Germany).