[6469] Cloud Engineer

Start date: Negotiable
Clearance Required: NATO Secret
Location: Brussels, Belgium

Requirements
• NATO SECRET security clearance.
• University degree from a nationally recognised/certified university in a quantitative discipline (e.g. Computer Science, Engineering, Statistics or Operations Research), with substantial systems engineering content and at least 2 years of specific experience; or at least 4 years of relevant experience supported by industry-recognised certifications.
• Knowledge and experience maintaining and developing multi-account AWS cloud environments.
• Experience with core AWS services, including Lambda, S3, CloudTrail, ECS and EC2.
• Knowledge of industry best practices, such as the AWS Well-Architected Framework.
• Significant experience using Terraform to build and maintain cloud infrastructure as code.
• Experience setting up CI/CD pipelines and automating containerised workloads on ECS.
• Experience with monitoring, logging and alerting tools such as CloudTrail and GuardDuty.
• Experience managing IAM, including SSO, VPC networking and least-privilege security controls.
• Proficiency in Python and Bash.
• Knowledge of Docker, Linux administration and Git.
• Strong written and verbal communication skills, including the ability to explain complex technical topics to non-cloud specialists.
• Ability to collaborate with technical and non-technical stakeholders, provide and receive feedback, and produce clear technical documentation.
• English proficiency in accordance with the AAS+ Framework Agreement requirements.
• Desirable Experience and Qualifications:
• Experience within the cybersecurity and/or intelligence domain.
• Experience with Microsoft Azure.

Duties and Role
• Maintain and further develop CTAB's cloud environment, supporting the operation of NATO's cyber threat intelligence platform.
• Ensure the availability, confidentiality and integrity of the cloud environment.
• Provision, configure and monitor cloud resources using Terraform.
• Maintain cloud infrastructure in a cost-effective manner, ensuring code and work are maintainable and properly documented.
• Work with data scientists, software engineers, cyber threat researchers and end-users to translate requirements into cloud environment functionalities.
• Ensure security is prioritised throughout cloud engineering and development activities.
• Develop innovative approaches to cloud architecture, security, data flows and cost optimisation while maintaining stability, scalability and functionality.
• Develop automation pipelines for infrastructure provisioning, configuration and platform coding projects.
• Support the transition from an AWS-based cloud environment to an Azure-based cloud environment.
• Participate in team and branch meetings, providing updates on projects and relevant developments.
• Produce specialist deliverables in accordance with task orders and submit them for quality review, testing or inspection.
• Continuously validate deliverables with the NATO Project Manager and CTAB colleagues.
• Attend periodic review sessions to ensure deliverables meet NATO's expectations.
• Maintain appropriate quality control before submitting work for acceptance.

Specific Working Conditions
• Location: NATO Headquarters.
• Security clearance: NATO SECRET.
• Working arrangement: Expected minimum of 2 days per week on-site, with the remaining 3 days working remotely.
• Working hours: Normally 08:30–18:00 Monday to Thursday and 08:30–16:00 Friday when working at NATO sites.
• Occasional work outside normal working hours may be required.
• Occasional travel to other locations for project-related meetings may be required, with associated travel costs reimbursed.
• Leave must be agreed with the designated NATO Project Manager.
• NATO will provide a secure working environment and access to the CTAB cyber threat intelligence platform.
• The contractor must provide all other equipment and services required to perform the contract.