C005198 Cyber Security Firewall Support (CTS) BELGIUM - 4 Sep

Deadline Date: Friday 4 September 2026
 
Requirement: Cyber Security Firewall Support
 
Location: Mons, BELGIUM
 
Full Time On-Site: Yes
 
Time On-Site: 100%
 
Not to Exceed Rate: 72 EUR
 
Total Scope of the request (hours): 418
 
Required Start Date: 1 October 2026
 
End Contract Date: 31 December 2026
 
Required Security Clearance: NATO COSMIC TOP SECRET
 
Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:

1. Current National or NATO SECRET clearance
2. Nationality of one of the NATO member countries
3. Current work visa for the specific location if applying for an in-country position

Any applications that do NOT meet all the above - and do not CLEARLY show these on the CV - will be deleted.
 
Duties & Role:
 
Tasks performed by a contractor include:

• Build, implement, maintain, and support Next-Generation Firewalls (NGFW) (System Administration).
• Configure, maintain and review security policies on Next-Generation Firewalls (System Configuration)

Under the direction / guidance of the NCSC Point of Contact, a contractor will be the part of the NCSC SEC011 Team supporting the following activities:
 
Central system administration of NGFWs to ensure continuing functionality and availability.

• Initial systems installation (software, application and threat signatures) and configuration
• Adding system to central management capability
• Assign initial template and device group settings
• Configure date/time/DNS settings
• Configure high-availability settings
• Update system software/signatures during pre-defined maintenance windows

Central configuration of NGFWs

• Implementation and verification of firewall rulesets/policies
• Adaptation of firewall rulesets/policies
• Adaptation of email attachment types
• Configuration of additional firewall rulesets/policies

Documentation of Firewall systems

• Development of SOPs and other documentation for repetitive activities
• Produce and maintain comprehensive documentation for all implemented systems

Review and update security documentationSupport of Firewall systems

• Technical support in troubleshooting infrastructure and operational issues
• Collaborate with other teams for a successful resolution;
• Provide technical support and guidance by answering end-user requests to identify issues in secure cross-domain data exchange.

Requirements
Skills, Knowledge & Experience:
 
Contractor who is going to perform the identified tasks as Cyber Security Firewall Support must have demonstrated skills, knowledge and experience as listed below. Activities performed by the contractor include facilitation of all lifecycle aspects of Boundary Protection Components deployed within and on the edge of NATO networks.
Services under current SOW are to be delivered by ONE resource that must meet the following experience, qualities and qualifications:

• The candidate must have a currently active NATO COSMIC TOP SECRET security clearance
• Bachelor's degree in Computer Science, Information Technology, or related field Or equivalent experience.
• Official firewall certification (such as PCNSA,)
• Official Network Management certification (such as Network+)
• Official Service Management certification (such as ITIL Foundation)
• 2+ years of experience in IT security, with a focus on Security Tools Management in large organisations.
• Strong understanding of security best practices
• Good engineering skills including programming
• Demonstrable experience of analysing and interpreting system, security and application logs in order to diagnose faults and spot abnormal behaviours.
• More than 2 years of experience in Palo Alto Networks Firewalls and Palo Alto Networks Panorama for Enterprise level deployments
• More than 2 years of experience in firewall installation and management of other vendors
• More than 2 years of experience in Scripting/Automation (Bash, Python, Ansible)
• More than 2 years of experience in system monitoring and troubleshooting Experience with network protocols and traffic analysis
• Ability to troubleshoot complex network security issues
• More than 2 years of experience in LAN/WAN networking including protocol network architecture
• More than 2 years of experience in TCP/IP protocols and services
• Profound communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams.