Deadline Date:
Monday 1 September 2025
Requirement:
Federated Mission Networking (FMN) and Data Centric Security (DSC) Subject Matter Expert (SME) and Architecture Support
Location:
The Hague, NETHERLANDS
Full Time On-Site:
Hybrid. On site at the NCI Agency location in The Hague (NL), specifically for in-person deliverable-based meetings. Remote work is acceptable.
Not to Exceed:
Q3/Q4 2025 BASE: NTE 60,030 EUR
Option 2026: NTE 106,110 EUR
Option 2027: NTE 106,110 EUR
Option 2028: NTE 106,110 EUR
Period of Performance:
01 October 2025
Required Security Clearance:
NATO SECRET
Background:
- The NATO Communications and Information Agency (NCI Agency) is dedicated to acquiring, deploying, and defending communication systems for NATO's political decision-makers and Commands. It operates on the frontlines against cyber-attacks, collaborating closely with governments and industry to prevent future debilitating attacks. The NCI Agency plays a crucial role in maintaining NATO's technological edge and ensuring the collective defence and crisis management capabilities of the Alliance.
- In pursuit of our mission, we require specialized advisory services to enhance our interim workforce capacity.
- The NATO Cyber Security Centre (NCSC) is NATO's first line of cyber defence. NCSC is the centre of technical expertise for cybersecurity within the Alliance by leading the technical collaboration within NATO and with Allied cyber defenders.
The NATO Cyber Security Centre (NCSC) is a team of over 200 members working to monitor and protect NATO networks. In the NCSC's role to deliver robust security services to the NATO Enterprise and NATO Allied Operations and Missions (AOM), the centre executes a portfolio of programmes and projects around 219 MEUR euros per year, in order to uplift and enhance critical cyber security services. The TRANSFORM Branch supports the missions of the NCSC by ensuring the delivery of coherent, holistic, effective and efficient Cyber Security services across the NATO Enterprise.
Objectives:
- The main objective of this Statement of Work (SOW) is to secure advisory services that provide expert guidance and support the Multinational CIS Security Management Authority (MCSMA) WG syndicates and chairman.
- However, in order to achieve the objectives, limited support and coordination may also be required with sister FMN working groups including: the Operational Coordination Working Group (OCWG); the Capability Planning Working Group (CPWG) and its syndicates, plus the Inter-Working Group (IWG) syndicates; the Coalition Interoperability, Assurance and Validation (CIAV) Working Group; the Change and Implementation Coordination Working Group (CICWG), as well as the FMN Secretariat. Additionally assistance in the planning and scoping of upcoming CWIX execution is also required to ensure that experimentation supports developing implementation plans.
- This document outlines the services to be provided by the Supplier to NCI Agency Cyber Security Transform Branch for the implementation and management of the ACPV Project.
- Moreover, it specifies the required skillset and experience.
- The Contractor shall deliver services in The Hague / The Netherlands.
- The highest level of classification that contractor may need to access is NATO SECRET (NS). As a result of this contractor must hold a valid NATO SECRET Security Clearance.
- The contractor shall report to the NCIA Project Manager or designated Point of Contact (POC) assigned by the NCIA Cyber Security Service Line
- The Contractor shall participate in monthly status update meetings and other meetings, physically in the office, or in person via electronic means using Conference Call capabilities, according to service delivery manager's instructions.
- For each sprint to be considered as complete and payable, the contractor must report the outcome of his/her work during the sprint, first verbally during the retrospective meeting and then in writing, within five (5) working days after the sprint's end date.
- A report in the format of a short email shall be sent to NCIA POC briefly mentioning the work held and the achievements during the sprint.
The contractor will be required to work in a hybrid way, both on-site at NCIA The Hague and remotely, averagely estimated 50%-50% as part of this engagement.
The NCSC Team is located in The Hague / The Netherlands, with working hours will from 08:30 to 17:30 with 1 hour for lunch from Monday to Thursday. On Friday working hours will be from 08:30 to 15:30 with 1 hour for lunch.
The contractor will be required to work following the rules and regulations applicable for the operations of NATO CIS.
The Purchaser will provide the Contractor with the following Purchaser-Furnished Equipment (PFE):
- Access to NATO sites, as required, for the purpose of executing this SOW.
- Workspace (needed business IT for both on- and off-site work, hot-desk at NCSC facility).
- NCIA "REACH" laptop to be used by the contractor for the execution of the contract.
Qualifications:
Services under current SOW are to be delivered by ONE resource that must meet the following experience, qualities and qualifications:
- SECURITY CLASSIFICATION: It is mandatory for the Contractor to be in possession of a NATO SECRET security clearance to facilitate follow-on engagements and coordination at NATO venues.
- Language Proficiency: English: Advanced
- The contracted individual will hold a University degree at a nationally recognized/certified University in a technical subject with substantial Information Technology (IT) content and 5 years post-related experience. The lack of a university/college degree may be compensated by the demonstration of at least 10 years extensive and progressive expertise in the duties related to the function of the SoW.
- Knowledge of military mission command and control (C2) Communications and Information Systems (CIS), mission operating environments and constraints;
- Knowledge of Federated Mission Networking and the Spiral Development process;
- Knowledge in NATO military and civilian structure, organizations and agencies;
- Knowledge of ISO/IEC27002 Security Controls, risk assessment methodologies, and risk management;
- General familiarity with Security Accreditation processes, and specifically the NATO Security Accreditation approach;
- Knowledge of Data Centric Security, Zero Trust architecture concepts, and implications to interoperability requirements;
- Strong diplomacy, coordination and persuasion skills; Strong leadership skills; Strong planning skills;
- Strong analytical thinking; Strong reporting and writings skills; Strong presenting skills;
- Accuracy and attention to details;
- The need to take ownership of tasks and wish to accomplish them to the end;
- Self-discipline and ability to work and deliver results with minimal supervision.
- Responsible for complying will all applicable local employment laws, in addition to following all NCIA on boarding procedures. Delivery of the service cannot begin until these requirements are fulfilled
- Knowledge of NATO networks, and specifically deployable aspects;
- Knowledge of enterprise modelling (specifically ArchiMate® Enterprise Architecture Modelling Language) and familiarity with the open source Archi tool