Firewall Engineer

For our customer, NATO, we are looking for a Firewall Support Engineer (must be security cleared)

Location: NATO, Belgium

Working Hours: 40 hours per week

Start Date: As soon as possible

Application Deadline: 27 June 2025

Client: NATO Communications and Information Agency (NCI Agency)

Division: NATO Cyber Security Centre (NCSC) – Gateway Security Services (GSS)

Project Scope:

The NCI Agency supports NATO nations in delivering capabilities and services in Consultation, Command & Control, Communications, Information, Cyber Defense, Intelligence, Surveillance, Reconnaissance, and Target Acquisition. The NCSC, consisting of over 200 cybersecurity experts, safeguards NATO’s enterprise and operational missions with an annual project budget of over €219 million.

The Gateway Security Services section ensures secure boundary protection and cross-domain data exchange across NATO networks, utilizing technologies such as firewalls, data diodes, and secure guard components.

Key Responsibilities:

• Install and configure firewall systems including software, threat signatures, and applications
• Integrate firewalls into central management (e.g., Palo Alto Panorama)
• Assign templates, configure system and DNS settings, and enable high-availability features
• Perform software/signature updates during scheduled maintenance
• Implement and adjust firewall rulesets and policies
• Configure email attachment types and additional security policies
• Develop and maintain standard operating procedures and documentation
• Troubleshoot system, infrastructure, and operational issues
• Support and guide end-users regarding secure cross-domain data exchange
• Collaborate with internal and external teams to ensure system reliability

Minimum Qualifications:

• Bachelor’s degree in Computer Science, IT, or equivalent experience
• Certification in firewalls (e.g., PCNSA or equivalent)
• Minimum 6 months experience with:
• Palo Alto Firewalls and Panorama
• Managing firewalls from other vendors
• System monitoring and LAN/WAN troubleshooting
• TCP/IP protocols and network architecture
• Strong understanding of cybersecurity best practices
• Ability to interpret logs and diagnose abnormal system behavior
• Excellent written and verbal communication skills

Desirable Skills and Experience:

• Network protocols and traffic analysis
• Complex network issue troubleshooting
• Scripting or automation (e.g., Bash, Python, Ansible)
• Network management certification (e.g., CCNA)
• Service management certification (e.g., ITIL Foundation)
• Cybersecurity certifications such as CISSP, CISM, CISA, GIAC
• Prior NATO experience or working in international/military environments
• Familiarity with the Confidentiality, Integrity, Availability (CIA) triad