CDT-0019 Development of Standards for Data Centric Security (NS) REMOTE - 16 Jul

Deadline Date: Tuesday 21 July 2026



Requirement:   Specialized Contractors for the  Development of NATO Data Standards for Data Centric Security



Location: Off-Site REMOTE



Not to Exceed: 2026: NTE: 212,000 EUR





Required Start Date: As soon as possible but not later than 24 August 2026



End Contract Date: 31 December 2026 (with renewal option for 2027 and 2028)



Required Security Clearance: NATO SECRET


Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:

1. Current National or NATO SECRET clearance
2. Nationality of one of the NATO member countries
3. Current work visa for the specific location if applying for an in-country position

Any applications that do NOT meet all the above - and do not CLEARLY show these on the CV - will be deleted.


General

The NATO Headquarters (HQ), Cyber and Digital Transformation (CDT) Division,
Interoperability Standardization Section (ISS) requires Subject Matter Expertise (SME) support in the development of NATO data standards towards Core
Services and Data Centric Security to enable Zero Trust and Cloud Adoption, so as to deliver on the key tenants of the NATO Digital Transformation Implementation Strategy and the Alliance Digital Strategy. Key areas of development are Federated Core Services developments, included Federated
Identity and Access Management, and the transformation of NATO’s data standards towards data centric standards. This includes execution of tasks under the Data Centric Security Implementation Plan (DCS IP).

This core business will be achieved through the development, organization and profiling of technical standards, the modernization and development of related directives and policies, as well as wider support to Alliance capability development through the Digital Policy Committee (DPC) substructure, primarily through the Data Centric and Core Services Capability Team
(DC2S CaT).

Requirements
Security Clearance

• The services provided by the Contractors require a valid NATO SECRET Security Clearance.

Expertise and Knowledge Requirements

The expertise and knowledge listed below are needed within the Contractor Team to deliver the work and Deliverables requested in this RFQ.

ESSENTIAL experience and knowledge:

• 5 or more years of experience in NATO Core Services (CS), Data Centric Security (DCS) and Zero Trust vision and strategy, including technical knowledge of enablers, such as the NATO Metadata Binding Service and the NATO End Point Labelling.
• 3 or more years developing a DCS Reference Systems (DCS RS).
• 5 or more years of experience in Industry and/or NATO with standards in the area of labelling, binding and marking.
• 5 or more years of experience in NATO Confidentiality Label Syntax
• specifications, profiles and emerging standards.
• 5 or more years of experience in commercial security labelling products and object level protection solutions.
• 5 or more years of experience in NATO Metadata Binding Mechanism specifications, profiles and emerging standards.
• 5 or more years of experience in NATO Core Metadata Specification, profiles and emerging standards.
• 3 or more years of experience in NATO’s STANAG processes.
• 3 or more years of experience in FMN concepts and/or evolutionary strategy.
• 3 or more years of experience or knowledge in federated Identity, Credential and Access Management (ICAM) policies, standards and industry trends.
• Ability to independently produce and edit technical documentation and reports in English.
• Excellent communications skills in English.