IT Security Architect

2 maanden geleden


NoordwijkBinnen, Zuid-Holland, Nederland ESA - European Space Agency Voltijd

EUROPEAN SPACE AGENCY
Vacancy in the Directorate of Internal Services.

ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment.

We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, beliefs, age, disability or other characteristics.

Applications from women are encouraged.

Post

IT Security Architect - Network Security
This post is classified A2-A4 on the Coordinated Organisations' [salary scale]).

Location
ESTEC, Noordwijk, Netherlands, or ESRIN, Frascati, Italy.

Description


IT Security Architect - Network Security in the IT Security Section, Security and Shared Infrastructure Services Division, Information Technology Department, Directorate of Internal Services.

ESA's IT Department (esait) provides corporate and common IT services to all business areas within ESA.


The IT Security Section provides security services including information and infrastructure protection solutions, ensures compliance of all esait services with ESA's Security Framework through an ISMS (Information Security Management System), hosts security roles and provides cyber security operations for all ESA.


As ESA consists of multiple directorates, many with their own specific IT services and solutions, it is critical that esait provides protection for these services and solutions which are connected to the corporate network.

This is done by offering advanced network and communications security services and providing security requirements at system or application level, supervising and facilitating their implementation.

To implement solutions, ESA leverages various vendors and industry solution providers. The resulting services are operated and maintained by external service providers.


If selected for this position, you will report to the Head of the IT Security Section in the Security and Shared Infrastructure Services Division within ESA's IT Department, drive the definition and evolution of network security policies and facilitate their implementation by offering self-service and automated solutions for system and application owners across the Agency.


Duties
You will have a large degree of autonomy to perform the following duties:

  • Evolve ESA's Network Security Policy, Network Security Requirements and related documentation;
  • Drive the implementation of Network Security Services using a userbased selfservice approach and in an automated manner towards various distributed IT teams across the ESA directorates;
  • Act as point of contact for the integration and adoption of esait's network security services;
  • Provide technical and engineering support to other functions within the Section such as the PSSO (Project System Security Officer), the SOC and CERT managers, and the ISMS Manager;
  • Other securityrelated tasks as may be required from time to time, including acting as a security lead to IT projects and providing IT security architecture advice and guidance.

More concretely, you will:
- own and drive the network security zoning strategy and policies;
- ensure proper definition and segregation of ESA's Network Security Zones;
- drive the end-to-end implementation of Zero Trust Network Access (ZTNA) across ESA, leveraging tools and services offered by other IT sections and divisions within esait;
- develop measurement metrics and measure the overall effectiveness and compliance with network policies;
- deliver clear instructions and guidelines for IT Teams, external (IT) service providers and system owners to connect or integrate their systems and services to/with ESA's corporate network;
- ensure the registration of systems and services connected to ESA's corporate network(s) by their respective System Owners;
- support the Cyber Security Operations teams in the fields of attack surface management, monitoring, logging and alerting with regard to the corporate network;
- act as the interface for IT teams when it comes to network security architecture and designs and guiding them to applicable instructions and guidelines but also advising as well as identifying and resolving gaps;
- drive the network security architecture design and strategy, drive and validate the implementation of new solutions, contributing to the overall security architecture;
- contribute to the operational model for network security services, with the aim of empowering the various IT teams to deliver network (security) services autonomously as long as they remain compliant with the network security policy and related requirements;
- contribute to the continuous evolution and improvement of the IT Security Section and the security posture of the Agency;
- develop and maintain appropriate documentation;
- stay abreast of networking and communications technologies and adapt ESA's network/comsec security posture and services accordingly.

To achieve this, you will have to:

  • acquire a good understanding of esait's various services, underlying systems and components;
- acquire a good understanding of ESA's directorates, their IT teams and their specific needs;
- understand the current network security architecture and implementation as well as proposing and driving its evolution;
- engage with security professionals across the Agency in order to evaluate and evolve the network security policies;
- define and explain security use-cases and operating procedures to both end-users and IT teams/service providers.

Technical competencies
Network and Communications Security

IT architecture design

Security policies and compliance

IT Operations

IT security risk management

Project and technical management

Behavioural competencies
Result Orientation
Operational Efficiency
Fostering Cooperation
Relationship Management
Continuous Improvement
Forward Thinking

Education


A master's degree in computer science, IT, cyber security, software engineering or other relevant discipline is required for this post.

A master's degree in other subjects may be acceptable if combined with appropriate experience.

Additional requirements
You are expected to be a self-starter, an effective communicator and able to drive your projects and processes autonomously.


Candidates should note that demonstrated experience of successful management of network security implementations in a large company or organisation is mandatory.

Experience of designing and operating classified networks including certified/accredited solutions would be an advantage.

Diversity, Equity and Inclusiveness

ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment.

We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, beliefs, age, disability or other characteristics.

Applications from women are encouraged.

At the Agency we value diversity, and we welcome people with disabilities. Whenever possible, we seek to accommodate individuals with disabilities by providing the necessary support at the workplace. The Human Resources Department can also provide assistance during the recruitment process. If you would like to discuss this further, please contact us via email at

Important Information and Disclaimer
In principle, recruitment will be within the advertised grade band (A2-A4).

However, if the selected candidate has less than four years of relevant professional experience following the completion of the master's degree, the position may be filled at A1 level.

Applicants must be eligible for security clearance by their national security administrations.

During the recruitment process, the Agency may request applicants to undergo selection tests.

Additionally, successful candidates will need to undergo basic screening before appointment, which will be conducted by an external background screening service, in compliance with the European Space Agency's security procedures.


Note that ESA is in the process of transitioning to a Matrix setup, which could lead to organisational changes affecting this position.

The information published on ESA's careers website regarding working conditions is correct at the time of publication. It is not intended to be exhaustive and may not address all questions you would have.

Nationality and Languages

Please note that applications can only be considered from nationals of one of the following States: Austria, Belgium, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Spain, Sweden, Switzerland, the United Kingdom and Canada, Latvia, Lithuania, Slovakia and Slovenia.

According to the [ESA Convention]), the recruitment of staff must take into account an adequate distribution of posts among nationals of the ESA Member States\*. When short-listing for an interview, priority will first be given to internal candidates and secondly to external candidates from [under-represented Member States])\*.

The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another Member State language would be an asset.

\*Member States, Associate Members or Cooperating States.

  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA - European Space Agency Voltijd

    Location ESTEC, Noordwijk, NetherlandsDescriptionGalileo Principal System Security Engineer in the PRS and System Security Engineering Unit, Galileo System Security Service, Galileo Project Office, Galileo Programme Department, Directorate of Navigation. The Galileo Principal System Security Service oversees security-related activities for Galileo core...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESTEC, Noordwijk, Netherlands DescriptionGalileo Principal System Security Engineer in the PRS and System Security Engineering Unit, Galileo System Security Service, Galileo Project Office, Galileo Programme Department, Directorate of Navigation.The Galileo Principal System Security Service oversees security-related activities for Galileo core...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESTEC, Noordwijk, Netherlands DescriptionHead of Galileo System Security Implementation Unit in the Galileo System Security Service, Galileo Project Office, Galileo Programme Department, Directorate of Navigation.The Galileo System Security Service is in charge of security-related activities for the Galileo core infrastructure, including end-to-end...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA - European Space Agency Voltijd

    Location ESTEC, Noordwijk, NetherlandsDescriptionGalileo Public Regulated Service Engineer in the PRS and System Security Engineering Unit in the Galileo System Security Service, Galileo Project Office, Galileo Programme Department, Directorate of Navigation. The Galileo System Security Service oversees security-related activities for the Galileo core...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESTEC, Noordwijk, Netherlands DescriptionGalileo Public Regulated Service Engineer in the PRS and System Security Engineering Unit in the Galileo System Security Service, Galileo Project Office, Galileo Programme Department, Directorate of Navigation.The Galileo System Security Service oversees security-related activities for the Galileo core...


  • Noordwijk-Binnen, Zuid-Holland, Nederland Serco Voltijd

    About the RoleSerco is a leading provider of space services, with a rich history of supporting over 50 space missions on behalf of numerous space and government agencies worldwide. We offer a comprehensive range of space capabilities, from satellite testing to launch services, LEOP to spacecraft operations, space surveillance to data management, and...

  • Space Configuration Officer

    3 dagen geleden


    Noordwijk-Binnen, Zuid-Holland, Nederland Serco Voltijd

    About the RoleSerco is a leading provider of space services, with a rich history of supporting over 50 space missions on behalf of numerous space and government agencies worldwide. We offer a comprehensive range of space capabilities, from satellite testing to launch services, LEOP to spacecraft operations, space surveillance to data management, and...

  • AI System Engineer

    1 maand geleden


    Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESTEC, Noordwijk, Netherlands DescriptionAI System Engineer in the Software Technology Section, Directorate of Technology, Engineering and Quality (D/TEC). The Software Systems Division deals with relevant software technologies for ground and space systems. This covers all life-cycle aspects from requirements specification to development,...

  • Administrative Coordinator

    3 dagen geleden


    Noordwijk-Binnen, Zuid-Holland, Nederland HE Space Voltijd

    Job Overview Key Responsibilities In the Budget and Control division, your role will encompass the following duties: Providing daily assistance to unit staff regarding travel arrangements, leave oversight, and training coordination; Evaluating incoming communications and documentation while managing the flow of outgoing correspondence; Offering...


  • Noordwijk-Binnen, Zuid-Holland, Nederland Serco Voltijd

    About the RoleWe are seeking a highly skilled and organized individual to join our team as a Space Operations Coordinator. As a key member of our Financial Operations Section, you will play a crucial role in supporting our client, the European Space Agency (ESA).Key ResponsibilitiesCertify and Calculate Travel Claims: Verify individual travel claims against...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESTEC, Noordwijk, Netherlands DescriptionAvionics, Data Handling and Platform AIT Engineer in the Ground Software Systems and Functional Verification Section, Directorate of Technology, Engineering and Quality (D/TEC). You will work within the Ground Software Systems and Functional Verification Section, a group of around 25 highly motivated experts...

  • Operations Manager

    3 dagen geleden


    Noordwijk-Binnen, Zuid-Holland, Nederland Serco Voltijd

    About the RoleWe are seeking an experienced Operations Manager to join our team at Serco, a leading Space Services Provider. As an Operations Manager, you will play a critical role in the success of our space missions, working closely with our team to ensure the smooth operation of our services.Key ResponsibilitiesService Definition and Deployment:...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESTEC, Noordwijk, Netherlands DescriptionHead of the Materials, Environments and Contamination Control Section in the Structures, Mechanisms and Materials Division, Mechanical Department, Directorate of Technology, Engineering and Quality. Reporting to the Head of the Structures, Mechanisms and Materials Division, as the Head of the Materials,...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA - European Space Agency Voltijd

    Location ESTEC, Noordwijk, NetherlandsDescriptionHead of the Materials, Environments and Contamination Control Section in the Structures, Mechanisms and Materials Division, Mechanical Department, Directorate of Technology, Engineering and Quality.Reporting to the Head of the Structures, Mechanisms and Materials Division, as the Head of the Materials,...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESTEC, Noordwijk, Netherlands DescriptionAs the Head of Service for Technology Support and Telecommunications Contracts, you will report to the Head of the Commercialisation and Technology Contracts Division in the Contracts Department, Directorate of Commercialisation, Industry and Competitiveness at the European Space Agency. You will manage a...

  • Project Controller

    1 maand geleden


    Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESOC, Darmstadt, Germany or ESTEC, Noordwijk, NetherlandsDescriptionProject Controller in the ESOC Programme & Project Control Section, Business Unit Control Office, Directorate of Operations. As Project Controller, you will be responsible for supporting the Project Manager(s) on all activities related to project cost, schedule and risks, as well as...

  • System Engineer

    2 maanden geleden


    Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESTEC, Noordwijk, Netherlands DescriptionSystem Engineer in the Proba-3 Unit, Projects Office, Systems Department, Directorate of Technology, Engineering and Quality.The Proba-3 Unit is responsible for the project management and system engineering for the Proba-3 project.The Proba-3 project has entered phase D, with AIV/AIT of the space and ground...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    LocationESTEC, Noordwijk, Netherlands DescriptionThe Directorate of Human and Robotic Exploration Programmes (D/HRE) is a programme directorate within ESA. Through a partnership between humans and robots, D/HRE is dedicated to exploring destinations in space in which humans are already living and working – or will live and work in the future – for the...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    Young Graduate Opportunity in the Directorate of Technology, Engineering and Quality ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment. We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, beliefs, age,...


  • Noordwijk-Binnen, Zuid-Holland, Nederland ESA Voltijd

    Young Graduate Opportunity in the Directorate of Technology, Engineering and Quality ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment. We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, beliefs, age,...