2026-0127 Provision RegOps Eng. to NCIA, SACT and CDT (NS) NETHERLANDS - 11 Sep

The NATO Communications and Information Agency (NCIA) located in The Hague, The Netherlands, is providing technical support to the NATO HQ Cyber and Digital Transformation (CDT) Division and Supreme Allied Command Transformation (SACT) by moving away from manual point-in-time audits, authorization to operate and security accreditation towards Continuous Governance, Risk and Compliance Auditing leading to Continuous Authorization to Operate (cATO) and Continuous Security Accreditation via EaC (Everything as Code) + Regulatory Operations (RegOps) using NIST OSCAL (Open Security Controls Assessment Language) data models, with the ultimate goal to deploy the RegScale platform as a workload and establish a Minimum Viable Product (MVP) for Continuous Authorization to Operate (cATO).

The services described in this SOW require contractor personnel with experience in Enterprise Architecture and in addressing challenges related to interoperability., * The candidate must have a minimum of a Bachelor’s degree from a nationally recognized/certified University in a related discipline and 3 years of related post-degree experience.

• The candidate must have a minimum of 3 years’ experience with Kubernetes, API Integration (REST), Python/Scripting, and CI/CD pipelines.
• The candidate must have a minimum of 3 years’ experience drafting technical data flows.
• The candidate must have a minimum of 3 years’ experience with Webhooks and Jira/ServiceNow APIs.
• The candidate must have a minimum of 3 years’ experience with M365 Graph API and Security Center.
• The candidate must have a minimum of 3 years’ experience with red-teaming compliance.
• The candidate must have a minimum of 3 years’ experience with PowerShell, Cloud APIs, and JSON.
• The candidate must have a minimum of 3 years’ experience with OAuth2, OIDC, and Identity Management.
• The candidate must have documented (or demonstrable) experience in process analysis and design techniques.