Senior Cyber Security Specialist 2 - PKI

Duties

• Install, configure and maintain NATO-wide Public Key Infrastructure (PKI/NPKI) systems and components.
• Manage NPKI virtualised infrastructure, networking components and hardware infrastructure.
• Install and maintain LDAP directory services and supporting HTTP services.
• Configure, integrate and maintain Enterprise Mobile Mobility solutions.
• Manage Online Certificate Status Protocol (OCSP) and Time Stamp services.
• Maintain NPKI-dedicated databases and perform database administration.
• Deploy, integrate and manage Card Management Systems.
• Manage Hardware Security Module (HSM) firmware upgrades and ongoing maintenance.
• Analyse Certificate Authority logs, troubleshoot alarms/errors and monitor user activity.
• Support smart-card enrolment and certificate creation processes.
• Perform day-to-day PKI operations, including management, backup and restore.
• Provide 2nd and 3rd level technical support to NPKI customers and ITM Operating Authorities.
• Provide technical assistance to the NPKI Mitigation project team.
• Design and implement new PKI components and services.
• Create and maintain Standard Operating Procedures (SOPs) and technical documentation for NPKI services.
• Investigate network faults, security incidents and performance issues and implement technical improvements.
• Support the integration of cybersecurity tools into NATO CIS environments.
• Conduct testing, validation and acceptance activities for cybersecurity capabilities.
• Produce technical documentation including installation guides, configuration baselines, test plans, test reports, SOPs and security hardening guides.
• Provide technical advice on cybersecurity architecture, tool configuration, system integration and operational improvements.
• Coordinate with project managers, system engineers, network engineers, security architects and operational stakeholders.
• Ensure solutions comply with applicable NATO security policies, operational requirements and technical standards.
• Support operational handover, knowledge transfer and training activities.
• Participate in technical meetings, reviews, workshops and coordination activities with NATO, national and industry stakeholders.
• Be available to work outside normal office hours when required for operational needs or crises.
• Travel to other NCIA, NATO and mission-led locations when required.

Requirements

• Bachelor’s degree from a nationally recognised/certified university in a relevant discipline, with at least 3 years of post-related experience.
• Alternatively, candidates without a degree may exceptionally qualify with at least 10 years of extensive and progressive relevant experience.
• Minimum 5 years of practical experience in cybersecurity or a related technical field.
• Extensive knowledge of IP-based networking technologies and systems, including network security.
• Practical experience configuring routers and switches.
• Strong systems administration experience with:
  • Windows Server
  • Red Hat Enterprise Linux (RHEL)
  • VMware/vSphere
  • Knowledge of computer and communications security, networking principles and vulnerabilities affecting modern operating systems and applications.
  • Practical SQL database administration experience.
  • Extensive experience with backup and restore of operating systems and infrastructure.
  • Practical scripting experience with Python and PowerShell.
  • Practical automation experience with Ansible.
  • Strong knowledge of SSL, TLS and OpenSSL.
  • At least 5 years' experience in network installation, testing and integration.
  • Experience with network support, including network management tools, performance monitoring and network maintenance.
  • Experience with network migration projects and troubleshooting/resolution of network problems.
  • Experience configuring, maintaining and repairing SAN, servers, tape libraries and VMware/vSphere environments.
  • Experience managing infrastructure installation projects, system installation/decommissioning, installation monitoring and quality plans/method statements.

  … lees de volledige omschrijving bij NCIM Groep.