Linux Systems Administrator, Security Tooling (Docker and Automation) for NATO with security clearance

A red team is only as good as the tooling behind it - and somebody has to keep that tooling up.

A defence cyber team near Mons runs a platform for emulating real adversary behaviour againstits own estate. You would be the person who owns that platform end to end: the Linux underneath itthe containers it runs in the accounts the proxies and the monitoring that proves it is availablewhen the team needs it.

What you would be doing

• Installing configuring and patching the Linux servers behind the platform and managingaccounts permissions and security settings
• Configuring the network services it depends on and keeping the proxy and access rules correct
• Reviewing logs and alerts before they become outages verifying system health daily and actingon tickets changes and incidents
• Reporting on system health monitoring activity and compliance - audit logs performancecapacity trends
• Keeping the documentation and the inventory of integrated sources and tools genuinely current
• Testing backup restores resolving performance bottlenecks and automating away the manual work
• Acting as the subject-matter expert for the tool itself through its whole lifecycle

What you would bring

• A computer science or IT degree or equivalent experience instead of one
• Several years in IT security with a focus on system administration and security toolmanagement in a large organisation
• Strong Linux administration Docker container management and confident scripting in Pythonshell or PowerShell
• IP switching routing and network troubleshooting; virtual infrastructure on VMware
• Log analysis as a diagnostic skill - you spot the abnormal not just the broken
• Welcome extras: service management and monitoring tooling configuration automation such asAnsible ITIL and certification such as CISSP CISM or CISA

Why this one is worth a look

It is a single clearly owned platform in a serious security environment with no travelattached and it runs from a standing framework rather than a one-off project.