OCIO-0061 NATO Enterprise Security Architecture Support (NS) - FRI 4 Jul

<p><strong>Deadline Date:</strong> Friday 4 July 2025 </p><p><strong>Requirement:</strong> NATO Enterprise Security Architecture Support</p><p><strong>Location:</strong> Brussels, BE</p><p><strong>Full Time On-Site: </strong>Yes</p><p><strong>Time On-Site: </strong>100%</p><p><strong>Period of Performance:</strong> 2025 BASE: As soon as possible until 31 December 2025 with possibility to exercise sprints from the following options:</p><p>2026 Options: 1st January 2026 until 31st December 2026</p><p>2027 Options: 1st January 2027 until 31st December 2027</p><p>2028 Options: 1st January 2028 until 31st December 2028</p><p><strong>Required Security Clearance:</strong> NATO SECRET </p><p><strong>Special Terms and Conditions: </strong>The contractor will be responsible for complying with the respective national requirements for working permits, visas, taxes, social security etc. whilst working on site at NATO HQ Brussels, Belgium. No special status is either conferred or implied by the host organisation, NATO HQ Brussels, Belgium to the contractor whilst working on site. The contractor will be responsible for complying with all the respective National Health COVID-19 regulations in Belgium before taking up the position</p><p> </p><p><strong>1. INTRODUCTION</strong></p><p>The NATO Chief Information Officer (CIO) ensures ICT coherence across NATO’s 50+ civil and military bodies, serving over 25,000 users. Reporting to the Secretary General, the CIO oversees Enterprise directives and advises on IT acquisition and services.</p><p>In 2025, the OCIO is prioritizing de-risking activities to enable NR and NS accreditation of cloud-based CIS across the NATO Enterprise. This is a critical step in ensuring that NATO can securely adopt cloud technologies while maintaining the confidentiality, integrity, and availability of classified information.</p><p>To achieve this, the OCIO is seeking expert support to assess the feasibility of accrediting NR and NS cloud-based CIS. This includes identifying policy gaps, technical challenges, and the necessary mitigation measures to align cloud architectures with NATO’s stringent accreditation requirements.</p><p>In addition, the OCIO is seeking expert support to develop a future-proof IAM strategy that will serve the NATO Enterprise mission, operational and security requirements.</p><p>These efforts will inform policy evolution and drive coherence across the NATO Enterprise both in accreditation and Enterprise IAM strategy. They also support key initiatives such as Digital Transformation and Cloud Adoption, ensuring that NATO can leverage secure and scalable cloud capabilities for operational and strategic advantage.</p><p><strong>2. SCOPE OF WORK</strong></p><p>The expert contractor (single resource) shall carry out the specific tasks, as described in the Work Packages below:</p><p><u><strong>Work Package WP1:</strong></u> NR Accreditation Support</p><p>- Support the execution and delivery of the NR Accreditation Task Force</p><p>- Support the documentation and clarification of policy gaps and issues with regards to the accreditation of cloud-based CIS up to NR.</p><p>- Gather, assess and provide technical documentation that can be used to support the accreditation of public cloud-based CIS up to NR, including technical documentation, reference architectures, list of security enforcing services in public cloud infrastructure.</p><p><u>Deliverable D1:</u> NR Accreditation Support</p><p>D1.1 Meeting minutes of periodic, ad-hoc and stakeholder meetings.</p><p>D1.2 Define and document list of security enforcing services in public cloud CIS, aligned and mapped on the requirements of AC322- D(2021)0032-REV1 and other relevant security policies.</p><p>D1.3 CIS reference architectures consisting of appropriate security measures, controls and/or mechanisms for an up to NR cloud-based environment.</p><p><u>Constraint(s) C1-C4:</u> The assessment should be completed by 31st of December to align with other relevant activities. Take into account periods of leave at NATO during the summer break (stakeholders might have limited availability around the end of year period (December 2025) and summer period (July-August 2025).</p><p><u>Acceptance Criteria A1:</u> Timely and accurate delivery of reports. Effective coordination of meetings accompanied by clear actionable meeting minutes. Clear, concise and comprehensive documentation.</p><p><u><strong>Work Package WP2:</strong></u> NS Accreditation Support</p><p>- Support the documentation and clarification of policy gaps and issues with regards to the accreditation of cloud-based CIS up to NS.</p><p>- Gather, assess and provide technical documentation that can be used to support the accreditation of air-gapped private cloud-based CIS up to NS, including technical documentation, reference architectures, list of security enforcing services mapped onto policy requirements.</p><p>- Provide expert input and strategic outlook on the feasibility of executing hi