#NC26ICT0052 - Cloud Engineer
Deadline: November 11, 2026
Requester: NATO
Location: Brussels, Belgium
Job type: Contractor
Start date: January, 2027
Security clearance: NATO SECRET
SCOPE OF WORK / DUTIES / ROLES
- Ensure the integrity, availability and confidentiality of CTAB’s cloud environment and lead maintenance and development efforts together with a software engineer, data scientist, and CTI researchers;
- Push for innovative new ways to architect security, data flows, and cost optimalization within the environment while ensuring maximum stability, scalability and functionality;
- Develop automation pipelines for infrastructure provisioning and configuration as well as for coding projects within the platform, while ensuring up-to-date documentation and clear communications on performed work;
- Help in transitioning from a AWS-based cloud environment to a Azure-based cloud environment.
REQUIRED SKILLS, KNOWLEDGE AND EXPERIENCE
- All general and domain specific qualification requirements stated in the AAS+ Framework Agreement shall be applicable (e.g., required English proficiency);
- A university degree from a nationally recognised/certified university in a quantitative discipline (Computer Science, Engineering, Statistics, Operations Research, etc.) with substantial systems engineering content and 2 years of specific experience – OR - at least 4 years’ experience similar to the tasks described in this SoW and relevant industry recognized certificates;
- Knowledge of and experience in maintaining and developing multi-account AWS cloud environments, specifically in core AWS products such as Lambda, S3, CloudTrail, ECS, EC2, and similar, as well as working according to industry best practices such as AWS’s Well Architected Framework;
- Significant experience in using Terraform to build and maintain cloud infrastructure as code, setting up CI/CD pipelines, automating containerized workloads on ECS and conditional access;
- Able to set up monitoring, logging and alerting with tools like CloudTrail and GuardDuty, and experienced in managing IAM with SSO, VPC networking, and least-privilege security controls;
- Proficient in Python and Bash and knowledge of Docker, Linux administration and Git;
- Experience within cybersecurity and/or the intelligence domain is strongly preferred but not required for this role, as is experience with Azure;
- Good communication skills, both orally and written. Able to translate complex technical topics into information conveyable to non-domain experts. Can easily cooperate with non-cloud
experts and explain conducted work, as well as give and take feedback and create clear and structured documentation based on the work conducted.
APPLY TO THIS POSITION