Gateway Security Engineer — Cross-Domain Data Exchange for NATO with security clearance

A multinational defence organisation moves data between networks of differentclassifications, and the equipment that makes that safe needs an engineer who understands boththe boxes and the boundary they enforce. You would join the gateway security team and takecentral ownership of those systems.

What you would be doing

• Administering and configuring guards and data diodes centrally, so cross-domain flows stayavailable and correct.
• Installing and configuring hardware and software, verifying that each configuration reallymeets the data exchange requirement behind it.
• Adapting release markings and attachment handling, adding new flows, managing users andaccess.
• Monitoring performance and availability, and troubleshooting application faults to aresolution.
• Writing automation for the repetitive parts of administration.
• Following patch releases, testing them, taking them through the approval process andinstalling them.
• Documenting what exists — procedures for repeat activities and proper documentation for everysystem you implement.
• Providing technical support to other teams and to users when a cross-domain exchange fails.

What you would bring

• At least three years in cyber security or a closely related field.
• Three years or more of Linux system administration, Red Hat Enterprise Linux preferred.
• Scripting and automation with Bash, Python and Ansible.
• Experience with boundary protection devices such as firewalls, and with system hardeningincluding SELinux.
• Network protocols and traffic analysis, TCP/IP services, LAN and WAN architecture, and thepatience to troubleshoot a complex network security problem.
• A relevant certification such as CISM, CISSP or GIAC.
• A degree in a related discipline with three years of experience after it — or roughly tenyears of progressive experience in this work instead.

The assignment is on-site near Mons.