PKI Engineers

Based in Mons, Belgium, you will join the Agency as we embark on a journey to transform our IT services to support NATO's Digital Endeavour. You will join NATO Cyber Security Centre (NCSC), which is responsible for planning and executing all lifecycle management activities for cyber security. In executing this responsibility, NCSC provides specialist cyber security-related services covering the spectrum of scientific, technical, acquisition, operations, maintenance, and sustainment support, throughout the lifecycle of NATO Communications and Information Systems (CIS). We are looking for driven and enthusiastic PKI Engineers who will take on the following roles and responsibilities: Manage the full lifecycle of digital certificates, including issuance, renewal, revocation, and compliance auditing, ensuring the integrity and reliability of the organization's PKI environment; Develop and implement automation workflows to streamline certificate management processes, reduce manual effort, and minimize operational risk; Analyze PKI system performance, identify optimization opportunities, and contribute to scalability improvements that meet evolving business needs; Contribute to ensuring high availability, resilience, and performance of PKI services across on-premises, hybrid, and cloud environments; Support the automation of certificate management workflows using scripting and automation tools (e.g., PowerShell, Python, Bash, Ansible, or similar technologies); Proactively monitor certificate health, identify potential expiration issues, and coordinate timely remediation to prevent service disruptions; Document actions taken and provide clear recommendations for follow-up or preventive measures to stakeholders. For a full list of duties, please review the on the NCIA career site. The majority of the activities will be performed on site, with potential travels and will allow limited work from home. Note that the internal job title is Cyber Security Infrastructure Specialist.

The valuable knowledge and experience that you bring to this role are: Bachelor's degree at a nationally recognised/certified University in a related discipline and 2 years post-related experience. Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 6 years extensive and progressive expertise in duties related to the function of the post; At least 2 years of practical experience in designing, deploying, and supporting secure web services and associated architectures; Advanced expertise in PKI technologies, including X.509 digital certificates, Certificate Authorities, and supporting protocols such as OCSP, CRL distribution, and S/MIME; Strong background in cryptographic algorithms (RSA, ECC, AES, SHA-2) and security protocols such as TLS/SSL and IPsec; Proven capability in identifying, assessing, and mitigating security vulnerabilities, with experience applying industry best practices and compliance frameworks; Minimum 2 years of experience managing Credential Management Systems (CMS), including enrolment workflows, lifecycle management, and secure key handling; Skilled in troubleshooting certificate-related issues across multiple operating systems, including Windows, Linux, and macOS; Fluency in English, both written and spoken.

5 year contract with competitive tax-free salary and household and children's allowances; Privileges for expatriate staff including expatriation and education allowances (where appropriate) and additional home leave; Excellent private health insurance scheme; Generous annual leave of 30 days plus official holidays; NATO Pension Scheme; Development programs such as professional training, wellbeing, and more. To learn more about NCIA and our work, please visit our . The NCIA prides itself on being an equal opportunity employer. We are committed to fostering an inclusive environment of mutual respect and value uniqueness and differences in gender, gender identity, race, ethnic or cultural origin, age, religion, sexual orientation and physical or neurocognitive ability. can be found via the NCIA career site.

SUMMARY

The Executive Management (EM) Division has the lead role in the overall management of the NATO HQ. The EM Division covers the following directorates: HQ Support and Transformation (HQST), Human Resources (HR) and Information, Communications, and Technology Management (ICTM).

Within the Executive Management Division (EM), NATO’s International Staff (IS) Human Resources (HR) Directorate is comprised of five pillars: Talent Management and HR Integration (talent acquisition, talent development, organisational design, development and change management, and business partnership); HR Policy and Strategy Coordination (IS and NATO-wide HR Policy);  Staff Services (contracts, pay and allowances, pensions, insurances, records and leave, and privileges and immunities), the Data Analytics section; and the Medical Unit.

The NATO-Wide Personnel Management Information System (NW-PMIS) provides personnel management ICT support for NATO civilian staff and pensioners. It is an in-house developed Oracle application used by HR centres of around 20 NATO Bodies spread across NATO member countries for the primary purpose of salary and pension calculation.

The post incumbent supports the payroll aspects of this system from an Information Technology standpoint. Tasks will involve analysis, design, development and maintenance of the software used by the NW-PMIS application