2024-0095 DevSecOps Engineer (NS) - TUE 14 May

Deadline Date: Tuesday 14 May 2024

Requirement: DevSecOps Engineer

Location: On-site, either in The Hague, Netherlands or in Braine L’Alleud, Belgium.

Period of Performance: As soon as possible but not later than 17 JUN 2024 to 31 DEC 2024, with possibility to exercise three 1 (one) year options (2025, 2026, 2027)

Required Security Clearance: NATO SECRET

1 INTRODUCTION

The NATO Communications and Information Agency (NCI Agency) has been modernizing its application-hosting infrastructure and has been implementing custom DevSecOps delivery processes. As part of this work a body of development and implementation work, it is needed to update existing applications, migrate them to new infrastructure and establish operation and maintenance capabilities. The ITM RC1 Applications team is building a multi-year team of system administrators and DevSecOps engineers to support this work.

NCI Agency is looking for a DevSecOps engineer with a background in automation and containerization technology as well as in legacy hypervisor environments to support the ITM RC1 team with both containerized and legacy migrations to the new infrastructure.

2 OBJECTIVES

NCI Agency is undertaking a major infrastructure modernization project, enabling comprehensive application lifecycle management. In addition, existing applications will have to be migrated to the new infrastructure.

The main objective of this statement of work is to support the ITM RC1 team with planning, performing, testing, validating and documenting this body of work. Specifically, this comprises of:

- Implementing DevSecOps and automation capabilities (GitOps, Kubernetes, Ansible)

- Transitioning suitable applications from a hypervisor to a container platform

- Migrating legacy virtual machine payloads

3 SCOPE OF WORK

Under the direction / guidance of the NCIA Point of Contact or delegated staff, the DevSecOps engineer will support building the ITM RC1 Application Migration team

This includes the following activities:

• Develop containers and Terraform and Ansible scripts for existing applications

• Develop / maintain infrastructure as code for deployment and configuration of infrastructure (VMs, Disks), core services (AD, CA, Exchange etc.), and applications (NATO and Commercial Application)

• Contribute to design and implementation of infrastructure as code and container orchestration services

• Contribute to the design and implementation of an overall DevSecOps capability

• Migrate Virtual Machines legacy payloads

• Implement hardening, compliancy and security scanning

• Create pipelines and self-service solutions for deploying test environments using infrastructure as code

• Participate in entire lifecycle activities – including design, testing, training and documentation

The contractor will be part of a team and will work using an Agile and iterative approach during multiple sprints. Each sprint is planned for a duration of 1 week. The content and scope of each sprint will be agreed during the sprint-planning meeting.

4 DELIVERABLES AND PAYMENT MILESTONES

The following deliverables are expected in relation to this statement of work:

2024 BASE period:

Deliverable 01: 30 sprints of software development.

Payment Milestones: Upon completion of each fourth sprint and at the end of the work.

Invoices shall be accompanied by a Certificate of Acceptance (Annex B), signed for acceptance by the Project Authority.

The NCIA team reserves the possibility to exercise a number of options, based on the same scrum deliverable timeframe and cost, at a