Security Technician

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We seek personnel to join our team and support key client projects.

Introduction

The NATO Communications & Information Agency (NCI Agency) is responsible for the support to be provided to NHQ Sa/ EUFOR (to operate and maintain its Static and Deployable Communication Information Service Capability

The project is to provide full Operations and Maintenance of all systems, services, and facilities located in Bosnia and Hercegovina.  Services cover the following:

Workspace Services and End User Devices, but not limited to:

• Laptops and Workstations
• Laptop and Workstation peripheral devices o Keyboards
  • Monitors
  • Mice
  • KVM switches
  • Desk Top Uninterrupted Power Supplies (where deployed)
  • Headset
  • Web Cameras
  • Speakers
• VOIP/ VOSIP phones
• VTC systems/ facilities
• Multifunctional Printers and Scanners
• Mobile Phones
• Cabling and access points.

Back End Infrastructure in Host Nation Locations, but not limited to:

• Uninterrupted Power Supplies
• Routers
• Switches
• Firewalls
• Crypto Systems
• Servers and Mass Storage devices
• Cabling and access points.

Deployable CIS Systems, but not limited to:

• Tactical Satellite Systems (TACSAT)
• INMARSAT
• Harris Radios.

Security domains or networks in Host Nation locations:

• EUFOR Secret network: Used by the personnel deployed under the EUFOR Crisis Establishment (CE).
• NATO Secret network: Used by the personnel deployed under the NATO CE.
• NATO Unclassified network: Used by all NATO, EUFOR personnel including Local Civilian Hires (LCHs).

Miscellaneous equipment directly related to building infrastructure:

• Prime power
• Room/Building UPS
• Building Air Conditioning.

Role Responsibilities

• Responsible for service support activities at level 1, 2 service support to level 3 activities when required according to defined competence area.

Mandatory Requirements:

• 5 Years professional experience in the required competence area
• Cisco Certified Network Associate (CCNA) – (Code 200-301) or equivalent qualifications.
• In-depth knowledge of Cisco routing and switching technologies.
• Proficiency in configuring and troubleshooting Cisco routers and switches.
• In-depth knowledge of network security principles and practices.
• Proficiency in fault diagnosis utilizing several management platforms (e.g. HP Openview, Netscout, Cisco Works).
• Proficiency in configuration and operation of HP Network Automation or equivalent network automation and orchestration systems.
• Proficiency in configuration and operation of Network Monitoring and Event Management systems (ideally CA Spectrum, HP Openview and Splunk).
• Familiarity with IP Diffserv QoS in Networks.
• In-depth knowledge of OSPF and BGP to include (multi-area architectures, BGP Confederations and Route Reflectors).
• Familiarity with EIGRP and IS-IS.
• Proficiency in implementing and operating LAN technologies (e.g. HSRP, STP, Switching, VLANs, DHCP snooping, ARP Inspection, Port-Security).
• Proficiency in implementing and operating network authentication and authorization systems and technologies (e.g. Secure ACS 5.x, 802.1x, 802.1ae MACSEC, RADIUS, TACACS+).
• PaloAlto Networks Certified Network Security Engineer (PCNSE) or equivalent qualification.
• CompTIA Security+ (pre-2020- Code SY0-601. Post 2020 Code SY0-701).
• In-depth knowledge of PaloAlto firewall configuration, management, and troubleshooting.
• Understanding of networking protocols and security principles.
• In-depth knowledge of network infrastructure and architecture.
• Experience with security policy design and implementation.
• In-depth knowledge of VPN technologies and configurations.
• In-depth knowledge of scripting and automation skills.

Desirable Requirements:

• Cisco Certified Network Professional (CCNP) – One core exam (CCNP Enterprise) and one additional concentration exam).
• Cisco Certified Technician (CCT) Routing and Switching (Code 100-490 RSTECH).
• The Computing Technology Industry Association- CompTIA Network+ certification (Code N10-008).

• PaloAlto Networks Certified Network Security Administrator (PCNSA).
• Certified Information Systems Security Professional (CISSP).
• NATO UHF TACSAT Basic (ETF Code A0037) or equivalent certification.
• In-depth knowledge of Deployable Satellite communications and associated systems (e.g. SATCOM, VHF, UHF, HF, LOS.).
• In-depth knowledge of computer operating systems.
• NATO UHF TACSAT Applications & Database Manager (ETF Code A0038).

Security Clearance

• National or NATO Cosmic Top Secret

Language Requirements

• Able to listen, speak, read, and write in English to or above the NATO SLP 3333 (= good/minimum professional) in accordance with STANAG 6001.

Work Arrangement

• 100% Onsite
• Primary working location is Sarajevo, BiH
• 08:00 to 17:00 Monday to Friday
• Occasional overtime and on call activities
• Rotation schedule for in country activities and vacation periods

Travel Expectations

• Local travel between official NATO locations
• Minimal international business travel

Contract Duration

• July 2024 to December 2025
• With 3 x 1-year options (2026,2027,2028)