[Hiring] IAM Consultant @Spektrum

Role Description

We are looking for personnel to join our team and support key client projects.

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: Advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: Development and maintenance of systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: Services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: Services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: Management of NATO's information technology infrastructure, including databases, applications, and servers.

The program, Assistance and Advisory Service (AAS), is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains, and defends the NATO enterprise-wide information technology infrastructure.

Role ID – 2026-0098

Due to the findings in the Type 4 Security Audit NATO, technical teams have been tasked with planning and implementing a security standardisation for Multifactor Authentication for internet facing web-portals throughout NATO enterprise.

Role Duties and Responsibilities

• Build a Proof of Concept (POC) environment based on a single Entra ID Identity Provider to a number of MFA technologies as MFA brokers.
• Test and document POC applications against a set test criterion.
• Build and test security logging with the security department.
• Document Service delivery requirements and support documentation.
• Work with Quality teams to align test strategy and test acceptance.

Qualifications

• Minimum 5 years of experience in Identity and Access Management.
• Strong knowledge of authentication protocols (SAML, OIDC).
• Sound knowledge of federated identity management and Single Sign On (SSO) solutions (Okta, Entra ID, ...).
• Proven experience designing and rolling out MFA at scale in an enterprise environment (5K+ users).
• Experience with certificate-based MFA smart cards, YubiKeys, passkeys/webauthn, TOTP, and push-based MFA apps (Microsoft Authenticator, Duo, ...).
• Understanding of risk-based or adaptive authentication strategies.
• Experience in securing web applications and APIs.
• Strong understanding of TLS, client certificates, reverse proxies, and Zero trust principles.
• Experience with SSO integration of web applications.
• Recent experience configuring MFA technologies as brokers: Moodle, Sharepoint, Keycloak, Cognito.
• Recent experience configuring Entra ID as an MFA Provider to the above MFA brokers.
• Ability to produce high standard documentation for testing and service delivery.

Requirements

• Excellent verbal and written communication skills.
• Full proficiency in English.
• Ability to communicate technical information to non-technical users in a clear and concise manner.
• Strong customer service focus with a commitment to user satisfaction.
• Patience and empathy when dealing with user issues and concerns.
• Attention to detail in documenting support activities and maintaining accurate records.
• Ability to work effectively as part of a team and share knowledge and resources.
• Willingness to collaborate with colleagues to solve complex issues.
• Strong customer relationship skills, including negotiating complex and sensitive situations under pressure.

Working Location

• Remote

Working Policy

• Off-site

Travel

• Some travel to other NATO sites may be required.

Security Clearance

• Valid National or NATO Secret personal security clearance.