PURPOSE
NCI Agency is looking for subject matter expertise for the delivery of this complex and critical cybersecurity capability.
This contract is to provide consistent support on a deliverable-based contract to NCSC based on the deliverables that are described in the scope of work below.
The Cyber Security SECURE Branch delivers a wide suite of enabling services in specific areas of Technical Services and CIS protection.
Gateway Security Services operate (amongst others) various technologies such as data diodes, secure guard components and firewalls to support the secure cross-domain data exchange.
Security Centre Secure Branch to fulfil identified CYBER SECURITY FIREWALL Support more effectively.
OBJECTIVES
The main objective of the statement of work is to underline the Cyber Security needs of the NCSC and to look for support to Gateway Security Service. The ‘Level 2/3 Cyber Security Firewall support should be manned by the contractor’s personnel on a daily basis to ensure service objectives are met continuously.
The aim of this SOW is to support NCSC with technical expertise specifically related to the operation and maintenance of CYBER SECURITY FIREWALL Support with a deliverable based (completion-type) contract to be executed in 2025.
The contractor’s personnel will be required to deliver a daily activities schedule, mainly operating the firewalls and supporting on the BAU (Business As Usual) activities, like request fulfilment (ITSM work) and system patching, as well as represent NCSC business unit on an Enterprise Level where required.
Tasks performed by a contractor’s personnel include:
– Build, implement, maintain, and support Next-Generation Firewalls (NGFW) (System Administration).
– Configure, maintain and review security policies on Next-Generation Firewalls (System Configuration)
REQUIRED PROFILE
The contractor’s personnel who is going to perform the identified tasks as CYBER SECURITY FIREWALL Support must have demonstrated skills, knowledge and experience as listed below.
Activities performed by the contractor’s personnel include facilitation of all lifecycle aspects of Boundary Protection Components deployed within and on the edge of NATO networks. The contractor’s personnel must meet the following experience, qualities and qualifications:
– Bachelor’s degree in Computer Science, Information Technology, or related field Or equivalent experience.
– Minimum qualifications required is a firewall certification (such as PCNSA or similar)
– Strong understanding of security best practices
– Demonstrable experience of analysing and interpreting system, security and application logs in order to diagnose faults and spot abnormal behaviours.
– At least 6 months of experience in the following areas:
- Palo Alto Networks Firewalls and Palo Alto Networks Panorama for Enterprise level deployments
- Firewall installation and management of other vendors
- System monitoring and troubleshooting
- LAN/WAN networking including protocol network architecture
- TCP/IP protocols and services
– Profound communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams
Additionally, the following experience, qualities and qualifications are desirable:
– Working experience in the following areas:
– Experience with network protocols and traffic analysis
– Ability to troubleshoot complex network security issues
– Scripting/Automation (Bash, Python, Ansible)
– Official Network Management certification (such as Network+)
– Official Service Management certification (such as ITIL Foundation)
– Understanding of Information Security Practices; relating to the Confidentiality, Integrity and Availability of information (CIA triad.)
– Possession of Industry leading certification in the area of Cybersecurity such as CISSP, CISM, CISA, GSNA, SANS GIAC
– In addition to the above, it is desirable for the contracted individual to have working experience and knowledge in the following areas:
- Experience in working with NATO.
- Previous work in an international environment comprising both military and civilian elements
COORDINATION AND REPORTING
The contractor’s personnel shall participate in daily status update meetings, activity planning and other meetings as instructed, via electronic means using Conference Call capabilities, according to the Operation Managers / Team Leaders instructions.
At the end of the project, the Contractor’s personnel shall provide a Project Closure Report that is summarizing the activities during the period of performance at high level
Due to the AGILE approach of this project, the deliverables will be provided for each sprint as well as their associated acceptance criteria at the beginning of the sprint. This includes sprint planning, execution and review processes.