System Security Infrastructure Engineer for NATO Project (L3)

Job summary

This role focuses on supporting and coaching SSI administrators, ensuring best practices in secure system operations, and maintaining up-to-date technical documentation (SOPs) aligned with evolving security standards. The objective is to strengthen security administration, foster technical knowledge transfer, and ensure smooth communication and compliance with NATO security requirements. You will have to deliver high-level support and operational excellence in the management of System Security Infrastructure (SSI), acting as the principal point of contact for NATO on all SSI-related matters.

Responsibilities:

• L3 Support Role on a hybrid CIS in charge of:
• Security solutions configuration, update and incident management
• Security monitoring (logs and alerts)
• Incident investigation and response
• Vulnerability investigation and security patch management
• Security reporting
• In liaison with Project information system security responsible

• ISS Admin Coaching

ITIL Processes:

• Event Management - beginner
• Incident Management – intermediate
• Service Request Management - beginner
• Change Management - intermediate
• Service Level Management - beginner
• Problem Management - intermediate
• Security Management - senior
• Service Asset & Configuration Management - beginner

Required Skills & Experience:

• IaaS, PAS, DMZ – beginner
• SSI – senior
• OS: Microsoft Windows Active Directory, DNS, NTP – intermediate
• Core services : DHCP / NPS / SCCM – intermediate
• Firewall configuration: Filtering, IPS, IDS, Deep Packet Inspection, anti-malware, IPSec configuration. (Fortinet or Palo Alto (Panorama)) - intermediate
• Network configuration (CISCO) - intermediate
• Bastion (Wallix) - intermediate
• PKI, keys and certification management – senior
• Log management (OS, AD, Cisco switch, routers, FW, ESXi) - intermediate
• Endpoint Security solution configuration (Trellix) – senior
• Access management and administrator identities management – senior
• Security patching – senior
• Backup configuration and monitoring (Commvault, Veeam) – senior
• VLAN configuration – intermediate
• SCAN SSI (Nessus) – beginner
• Antivirus, antimalware (epo) – intermediate
• Ansible GIT – intermediate
• Fluent English

Behavioral skills:

• Values-driven (Focus, Openness, Respect, Courage, Commitment)
• Self-driven and proactive problem solver
• Team player with a positive attitude
• Strong communication (spoken and written English)
• Able to work independently and in cross-functional teams
• Nice to have: Leadership and presentation skills, French

Key Deliverables:

• Security Reports
• Training documentation and courses
• SOP

Certification:

• ITIL V4 foundation

Mobility:

• Flexibility to travel between France and Belgium
• No work from home available
• On-boarding period: 2 months

Your careeer at Thales:

Future opportunities will allow you to discover other domains or sites. You will be able to evolve and grow your competences in different areas:

• Room and attention to personal development.
• Build your talents in another domain of Thales Group, discovering new products, new customers, new country or go to a more complex Solutiom
• Choose between a technical expertise or a leadership path.
• Build an international career within a leading Engineering Group.
• Work for different Thales domains & entities.

Your immediate benefits:

• 24 holiday days a year
• Benefit Online
• A good work-life balance which includes flexible working hours
• A comprehensive compensation and benefit package including medical coverage & life insurance
• GoFluent & Udemy Subscription
• Engineering, Technology & Management Academies