Jobs at SPEKTRUM GROUP

Leads transitions of IT projects and capabilities into operational service, ensuring readiness, acceptance, early-life support, and risk management. Oversees Wiesbaden service delivery, infrastructure, incidents, problems, changes, service levels, budgets, vendors, and contractors. Coordinates multidisciplinary teams, manages customer and executive stakeholders, drives continual improvement, and ensures compliance with security and service requirements. The role requires extensive IT service management and project management experience, relevant certifications, and a valid National or NATO Secret clearance.

Provides first- and second-line support for NATO enterprise network infrastructure in Brussels. Responsibilities include monitoring, troubleshooting, configuring, securing and optimizing Cisco campus and data center networks; supporting ACI, SD-Access, ISE, wireless, DNS, DHCP, IPAM, firewalls and load balancing; deploying and refreshing equipment; managing incidents, changes, backups and documentation; and providing out-of-hours operational support.

Provide Level 3 functional and technical ServiceNow CSM support, resolve incidents, configure and deploy approved enhancements, monitor platform health, maintain environments, manage patches and upgrades, investigate performance and integration issues, and document support activities. The role requires coordination with NCIA teams, NATO business-hour coverage, occasional travel, and a valid National or NATO Secret clearance.

Provide architectural direction and technical oversight for ServiceNow SPM and CSM modules, including customizations, integrations, upgrades, incident investigations, performance, security, governance, and technical risk management. The role guides implementation decisions, coordinates technical priorities, supports SLA and risk reporting, and advises stakeholders. It requires regular Brussels travel, remote delivery from a NATO member country, and a valid National or NATO Secret clearance.

Maintain and develop NATO’s cloud environment supporting a cyber threat intelligence platform. Responsibilities include cloud architecture, security, scalability, cost optimization, infrastructure-as-code, CI/CD automation, monitoring, logging, documentation, and migration from AWS to Azure. The role requires collaboration with software engineers, data scientists, and cyber threat intelligence researchers, along with clear communication to technical and nontechnical stakeholders.

Plans, coordinates, and oversees NATO defensive cyberspace operations across planning, execution, assessment, and remediation. Coordinates cyber operations stakeholders, supports incident response and risk management, develops technical plans and reports, facilitates decision-making, and briefs technical and non-technical audiences. The role requires military-focused cyber defense experience, project management in federated environments, strong communication skills, and a valid NATO or national Secret clearance.

Provide Level 3 functional and technical support for ServiceNow Strategic Portfolio Management. Investigate incidents, perform root-cause analysis, configure and deploy approved enhancements, assess technical changes, validate releases, and monitor production impact. Collaborate with business support and service management teams, provide guidance and knowledge transfer, and recommend improvements to SPM usability and adoption.

Provides expert Microsoft 365 and Azure security operations, including monitoring, threat hunting, incident response, digital forensics, vulnerability management, threat intelligence, and security assessments. Develops detection methods, security policies, standards, advisories, and awareness materials. Supports operational resilience, disaster recovery exercises, governance reporting, and urgent after-hours incident response for mission-critical cloud and collaboration environments.

Administer and maintain enterprise VMware vSphere and Cloud Foundation environments, including patching, upgrades, monitoring, troubleshooting, security, capacity management, automation, and lifecycle operations. Develop Terraform and scripting-based Infrastructure as Code, support alternative virtualization platforms, collaborate with infrastructure teams, maintain documentation, contribute to improvement projects, and provide technical guidance to junior colleagues.

Administer and maintain enterprise virtualization infrastructure focused on VMware vSphere and VMware Cloud Foundation. Responsibilities include lifecycle patching, monitoring, troubleshooting, performance tuning, security, automation, Infrastructure as Code, documentation, change management, and infrastructure improvement. The role also supports alternative virtualization platforms and collaborates with storage, networking, backup, security, and operating-system teams while providing technical guidance to junior colleagues.

Designs, administers, monitors, and optimizes enterprise storage and backup infrastructure. Responsibilities include managing storage arrays, SAN fabrics, backup platforms, replication, provisioning, upgrades, migrations, recovery testing, disaster-recovery exercises, Tier 3 support, automation, security hardening, documentation, and vendor collaboration. The role also delivers infrastructure projects, performs root-cause analysis, supports on-call operations, and improves data protection and recovery capabilities.

Manage and secure Trellix endpoint products across Windows devices, VDI environments, and Windows/Linux servers. Responsibilities include maintaining security policies and baselines, rolling out upgrades, supporting incident response, troubleshooting, analyzing security events, optimizing configurations, documenting procedures, and providing endpoint security architecture guidance. The role is primarily on-site in Brussels and supports NATO IT infrastructure.

Administer and support secure server, virtualisation, directory, messaging, database, storage, backup, and application infrastructure. Manage Windows and Linux systems, VMware environments, SAN storage, patches, deployments, monitoring, incident resolution, access controls, and recovery procedures. Maintain Active Directory, Exchange, SharePoint, SQL Server, Oracle, and SCCM/MECM environments while coordinating with security and service teams. The role is based onsite in Izmir, supports NATO locations, includes on-call duties, and requires NATO SECRET clearance.

Research cyber threat actors, infrastructure, capabilities, tactics, techniques, and procedures for NATO. Develop scripts and queries to automate infrastructure tracking, correlate intelligence sources, identify malicious activity, and produce actionable threat intelligence. Create detection signatures, contextualize indicators of compromise, support threat hunting and network defense, and translate technical findings into strategic intelligence for decision-makers. Collaborate with threat researchers and analysts while delivering validated reports, methodologies, and tooling improvements.

Administer and support DirX Directory and DirX Identity systems, including synchronization, integrations, connectors, configuration, troubleshooting, backups, disaster recovery, and performance optimization. Provide Level 2 and Level 3 technical support, implement enhancements, manage incidents and changes, document procedures, train support staff, and participate in on-call operations. The role also requires directory integration, scripting, database querying, system administration, PKI knowledge, and coordination with NATO stakeholders.

Leads NATO procurement transformation initiatives, including enterprise procurement process harmonization, ERP and cloud transformation, stakeholder coordination, project delivery, risk management, and business services advisory. The role aligns procurement requirements with enterprise architecture, data management, cloud adoption, and broader digital transformation objectives while preparing recommendations for senior decision-makers.

Develop and maintain NATO communications and networking standards, reference architectures, and conformance criteria. Lead ArchiMate modeling for NATO communications architectures, support STANAG and AComP development, and enable interoperability across BLoS, LoS, SATCOM, cellular, and IP-based systems. The role also supports governance, coordination, stakeholder engagement, and systems integration across NATO entities. The position is on-site in Brussels and requires business travel and NATO Secret clearance.

Manage the NATO ITM Recovery WP2 Kiosk deployment across 32 international sites. Responsibilities include stakeholder and personnel management, deployment coordination, progress and funding tracking, risk and issue reporting, supplier liaison, security card issuance, governance under PRINCE2, configuration management, documentation, change control, and project reporting. The role requires coordination with NATO stakeholders, engineers, suppliers, and site representatives, with weekly travel between Braine-l'Alleud and Mons.

Designs and delivers technical training for users and administrators, including workshops, virtual sessions, demonstrations, guides, videos, and assessments. Maintains knowledge platforms, SOPs, documentation, and knowledge articles; captures lessons learned from incidents and exercises; and evaluates training effectiveness. The role supports NATO CIS operations from an on-site location in Izmir, with travel to other NATO sites as required.

Provides expert advice and analysis across CIS disciplines including enterprise architecture, cloud, cyber defence, data analytics, ITIL, modernisation, and interoperability. Assesses technical solutions, identifies risks and gaps, develops advisory reports and decision papers, facilitates stakeholder workshops, and contributes to standards, roadmaps, and continual improvement for NATO information systems.