2026-0118 dcis network engineering support (cts) netherlands - 4 sep

• Current National or NATO SECRET clearance
• Nationality of one of the NATO member countries

• Current work visa for the specific location if applying for an in-country position Any applications that do NOT meet all the above - and do not CLEARLY show these on the CV - will be deleted. Introduction

• The NATO Integrated Mission Services Centre (NIMSC) is responsible for the coordination, planning, and delivery of engineering and operational support capabilities across Mobile CIS Infrastructure, including Deployable CIS Services (DCIS), Dispersible Systems, Highly Mobile Systems, SATCOM, and Wireless Communications. To ensure the sustained availability, performance, and resilience of these mission-critical capabilities, NIMSC requires structured, continuous Operations and Maintenance (O&M) support aligned with NATO governance, service management processes, and operational priorities.
• Through this Statement of Work (SoW), the NIMSC seeks industry support to deliver comprehensive technical, operational, and service-governance activities for the NATO Mission Iraq (NMI) Deployable Communication and Information System (CIS). The objective is to ensure implementation of a new CIS system, an uninterrupted service delivery, effective incident and change management, accurate and auditable reporting, and continuous service improvement across all NMI functional locations. The Contractor, through the selected personnel, will provide technical support, system documentation management, service reporting, and participation in on-call and operational coordination activities, ensuring that NMI CIS capabilities are fully operational, secure, and aligned with NATO standards.

Scope of Work

• The scope covers the configuration, deployment support, and tool integration of Deployable CIS Services (DCIS) kits. The Contractor shall provide services in a continuous, structured, and highly secure manner, ensuring alignment with configuration diagrams, security classification boundaries, and operational priorities.
• The Contractor shall provide services contributing to the secure configuration, deployment, and operational readiness of the DCIS kits and associated network management services, ensuring alignment with configuration diagrams, security classification boundaries, and operational priorities.

This includes the following activities:

Advanced device configuration: Executing the end-to-end configuration of Cisco routing devices based strictly on provided configuration diagrams, ensuring accurate mapping of connectivity, ports, VLANs, IP addresses, and subnets.

Virtual routing and segmentation: Implementing virtual routing and forwarding (VRFs) to ensure strict, auditable protocol and traffic isolation across multiple security classifications.

Routing protocol deployment: Configuring and optimizing dynamic routing protocols including IS-IS, OSPF, and BGP according to enterprise architecture standards.

Secure Tunnel Establishment: Constructing, validating, and securing Generic Routing Encapsulation (GRE) and IPsec tunnels to facilitate secure remote transport.

Remote hands and physical coordination: Collaborating with local support personnel to guide physical installation, verify cabling, and establish baseline physical connectivity.

Management tool integration: Enrolling, configuring, and verifying all newly deployed devices within centralized management and monitoring tools, specifically Cisco Identity Services Engine (ISE) and CA Spectrum.

System documentation management: Supporting the maintenance and updating of system documentation to reflect changes, configurations, and operational procedures.

User Acceptance Testing (UAT) and Troubleshooting: Providing specialized technical support during UAT, including active fault diagnosis, troubleshooting, and resolution of routing, tunnelling, or authentication issues., * Design, implement, configure, and support scalable enterprise network routing infrastructures leveraging BGP, OSPF, IS-IS, and MPLS routing protocols.

• Configure and operate Cisco routing and switching platforms, including Cisco IOS-XE and Cisco NX-OS.
• Configure Layer 2 and Layer 3 network services.
• Configure and validate Virtual Routing and Forwarding (VRF), GRE tunnels, IPsec tunnels, MPLS Traffic Engineering, policy-based routing, route redistribution, route summarisation, HSRP, and other enterprise routing technologies.
• Configure data centre and switching technologies including STP, MSTP, Rapid PVST, EtherChannel, LACP, Virtual Stack, StackWise, and Cisco Nexus platforms.
• Configure Quality of Service (QoS) policies, including traffic classification, shaping, and policing.
• Configure and operate network monitoring and event management systems (e.g., Intermapper, CA Spectrum).
• Perform console and remote deployments, IOS software upgrades, configuration backup and recovery.
• Validate routing adjacencies, implementation activities, and end-to-end network connectivity.
• Perform implementation testing, User Acceptance Testing (UAT), and deployment validation.
• Troubleshoot implementation-related technical issues using tools such as Wireshark, NetFlow, and SNMP.
• Apply network security best practices, including ACLs, VPNs, IPSec, AAA, Role-Based Access Control, and security hardening.
• Produce implementation records, technical evidence, and supporting documentation.
• Knowledge of firewall technologies and enterprise security architectures.
• Knowledge of the ITIL IT Service Management framework.

• A minimum of a Bachelor’s degree from a nationally recognised university in Computer Science, Information Technology, Engineering, Telecommunications, or a related discipline, together with a minimum of two (2) years of relevant professional experience; or equivalent education, professional qualifications, and demonstrable experience in enterprise network engineering.
• Alternatively, exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate’s particular abilities or experience that is/are of interest to NCI Agency, that is, at least five (5) years of extensive and progressive expertise in duties related to the function of the post.
• At least five (5) years of progressive professional experience in network engineering roles, including the design, implementation, configuration, integration, deployment, and support of enterprise network infrastructures.
• Experience delivering services within operational or project delivery environments.
• Experience supporting production network deployments, implementation projects, and technical exercises.
• Experience preparing technical documentation, test plans, implementation procedures, and Standard Operating Procedures (SOPs).
• Experience in configuration management practices and supporting tools.