CDT-0024 Specialist Public Key Infrastructure (NS) - FRI 16 Oct

Deadline Date: Friday 16 October 2026

Requirement: Specialist Public Key Infrastructure

Location: Brussels, BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 380 (estimate)

Required Start Date: As Soon As Possible

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Special Terms and Conditions: The contractor will be responsible for complying with the respective national requirements for working permits, visas, taxes, social security etc. whilst working on site at NATO HQ Brussels, Belgium. No special status is either conferred or implied by the host organisation, NATO HQ Brussels, Belgium to the contractor whilst working on site. If the successful candidate is allowed to work remotely, travel to NATO HQ for meetings will be at the candidate’s expense. Travel to other locations will be reimbursed as if the travel originated in Brussels. Attendance at these meetings is mandatory.

1. INTRODUCTION

The Cyber and Digital Transformation Division (CDT) oversees all aspects of cyber and digital transformation across the entire NATO enterprise and is the principal institutional engine for advancing the Alliance’s agenda on those issues. The division also coordinates on all aspects linked to countering hybrid actions. As a fully integrated civilian-military Division, it combines the strategic insight of the International Staff (IS) with the operational expertise of the International Military Staff (IMS), enabling coherent, credible, and actionable advice to NATO’s senior decision-making bodies.

The Cyber Plans and Capabilities Section (CYPCAP) delivers technical and capability expertise in the field of cyber defense, cyber security, and cyber operations. Through the DPC substructure, the Section delivers technical and implementation directives on cyber security and cryptographic standards. The Section supports the Military Committee in its governance role for cryptographic modernization and transformation as well as in cyber matters. The Section also enables the operationalization of cyber as a domain through delivering cyber defense subject matter expertise into the NATO Defense Planning Process and the Common Funded Capability Delivery Governance Model. CYPCAP also oversees the implementation of the Cyber Adaptation Roadmap. Additionally, this section supports the Cyber Strategy and Policy Section in developing operational doctrine in cyberspace.

2. OBJECTIVE

Specialist Public Key Infrastructure will play a role in all of activities related to Public Key Infrastructure (PKI) and broader cryptography in CYPCAP. S/He will be responsible for preparation of draft policies, guidance and technical documentation related to NATO PKI. This specific task will require frequent engagement with various stakeholders possessing different backgrounds, therefore it is critical that the incumbent is able to clearly communicate and engage at an appropriate level.

S/He will support various activities related to ongoing NATO PKI projects, including analyzing architectures and designs, conducting feasibility assessment of project proposals, tracking delivery of projects and conducting audits of existing systems. All of the activities need to be properly documented. The incumbent will also be involved in risk management process related to NATO PKI activities

S/He might be required to engage with industry to gather best practices, conduct market surveys and analyse possible solution for inclusion into the NATO CIS ecosystem.

Additionally, S/He will support various cryptographic communities of interest through organizing meetings, coordinating attendance, supporting the local organizing entities and finally preparing and staffing meeting records. This will include managing NATO portals and supporting both internal and national representatives.

3. TASKS

The incumbent must be able to perform effectively and efficiently with minimal supervision the tasks described below.

• Prepare draft documents related to NATO cryptography with focus on Public Key Infrastructure (PKI) and coordinate their approval through dedicated Working Groups and Committees.
• Provide expertise in the field of cryptography (including post-quantum cryptography) and PKI in support of ongoing NATO and national initiatives.
• Manage organization of events and develop records of the meetings.
• Act as a secretary or staff support for different working groups.
• Support conducting audits of systems and entities within the Organization.
• Prepare presentations, speeches and speaking notes for senior officials as directed.
• Provide continuous and quality executive advice to the Staff Officers on the relationship with the NATO cryptographic stakeholders.
• Manage the cryptographic communities of interest portals and support external engagement.

4. PROFILE

[See Requirements]

5. LOCATION OF DUTY

The consultancy service will be executed on-site at the NATO HQ offices in Brussels, Belgium. Limited travels to other NATO bodies and Committee meetings in NATO Countries may be required.

The contractor will be embedded within CDT, working within the Cyber Plans and Capabilities Section, reporting directly to the Section Head, and working in close coordination with the other stakeholders.

The duty location is NATO HQ in Brussels, Belgium. Teleworking is possible (only in Belgium) on a case-by-case basis upon an agreement with management.

TIMELINES

The services of the contractor are required for the period starting as soon as possible until 31 December 2026.

A contract extension is possible for the calendar years 2027 and 2028. These contract extensions are subject to performance of the contractor and related NATO regulations and budget availability.

6. SPECIFIC WORKING CONDITIONS

The work will be performed in an office-based environment within a secure setting, under standard working hours. Occasional non-standard working hours may be required to support urgent or high-priority tasks.

All documentation shall be based on NATO or CDT templates or agreed templates.

All project material shall be stored on CDT dedicated spaces on approved NATO platforms.

7. TRAVEL

The contractor will be expected to undertake business travel in support of specification development and coordination activities with NATO stakeholders.

The frequency and duration of travel will depend on operational requirements and tasking needs.

Travel expenses will be reimbursed to the individual directly (in addition to the hourly rate) under NATO rules. Travel to Shape will not be reimbursed.

8. SECURITY AND NON-DISCLOSURE AGREEMENT

The security classification of the service will be up to NATO SECRET.

The contractor providing the services under this SOW is required to hold a valid NATO SECRET security clearance at the time of proposal submission.

The contractor will be required to sign a Non-Disclosure Agreement prior to commencing work.

Requirements

4. PROFILE

The candidate must meet the following requirements:

• A university degree in Computer or Communication Science, Information Management, Information Security, or a related field.
• Demonstrated experience (5+ years) in post-related field.
• Possess comprehensive knowledge of the principles network security and symmetric and asymmetric cryptography; including quantum threat to cryptography.
• Has very good understanding of PKI, including applicable RFCs and other standards, backed with practical implementation experience and/or experience in drafting PKI regulatory frameworks.
• It is desirable that the contractor has previous experience with NATO-related cryptographic issues, such as the use of Type A algorithms, symmetric key distribution in a military environment and NATO policies on cryptography and cryptography procurement.
• Possess experience in audit procedures, audit execution and post-audit remediation planning.
• Demonstrate experience with risk management, as applied to cryptographic and/or cyber security fields.
• Knowledge of NATO’s internal structures, decision-making processes, stakeholder environment and civil-military working practices, gained through relevant professional experience is desirable.
• Excellent written and spoken English (SLP 4343+), with the ability to communicate complex technical and policy issues clearly to a range of stakeholders.
• The contractor must have proven communication and negotiation skills matured within a large international environment.

8. SECURITY AND NON-DISCLOSURE AGREEMENT

• The contractor providing the services under this SOW is required to hold a valid NATO SECRET security clearance at the time of proposal submission.