FIT OCF Infrastructure Engineer

Enterpryze Consulting Ltd.

View: 145

Update day: 16-11-2025

Location: Mons Hainaut

Category: Executive management

Industry:

Loading ...

Job content

FIT OCF Infrastructure Engineer


  • Working Location:Mons, Belgium
  • Security Clearance:NATO Secret /SC
  • Language:High proficiency level in English language


DESCRIPTION:

The NATO Computer Incident Response Capability (NCIRC) – Full Operational Capability (FOC) includes forensics capabilities covering both online/on-demand endpoint investigation plus traditional, post-incident investigation, in addition to related mobile device analysis and password recovery.
Operational Computer Forensics (OCF) is deployed across various networks of different classifications, giving analysts the ability to interrogate, extract, and analyse forensic data from endpoint systems such as workstations and servers. Central command consoles interact directly with endpoints, or in the case of remote sites across Wide Area Networks (WANs), command and control may be performed against a remote server which mediates and manages endpoints at its location to reduce the burden on WAN bandwidth.


DUTIES/ROLE

  • Replace the existing Online Computer Forensics (OCF) software in two security domains in existing virtual machine environments and replace/deploy associated endpoint agent software
  • Ensure that each deployment of the OCF solution shall be able to operate completely and independently of one another
  • Ensure that each deployment of the OCF solution contains identical product components, version, and configurations, excepting those elements that are specific to the domains in to which the OCF solution has been deployed (e.g. network addressing, domain names, user authentication configuration, etc)
  • Integrate the OCF solution in each domain with NCIA’s existing SolarWinds monitoring solution in each domain
  • Install and configure all Contractor delivered hardware/software and perform all integration services at the sites agreed with NCIA in the System Design.
  • Depending on the OCF solution System Design agreed with NCIA`s, the hardware/software for the management/back-end (i.e. non-endpoint agent) elements of the OCF solution shall be deployed in central infrastructure (Tier-2, hosted in SHAPE, Mons, Belgium), remote sites (Tier-3, different geographical sites), or a combination thereof in order to achieve the required functionality
  • Deploy endpoint agents to all (c28) sites identified
  • De-install existing OCF management/server/back-end components and install the new OCF management/server/back-end components on all sites and all domains as agreed with NCIA in the System Design
  • De-install existing OCF endpoint agent(s) and install the new OCF endpoint agent(s) on all sites on all domains as agreed with NCIA in the System Design
  • Perform Site Visits to any sites as required for the complete deployment of the OCF solution, including the deployment of endpoint software agent(s)
  • Achieve 100% deployment of all OCF solution back-end/management elements in all sites and all domains agreed by the NCIA in the System Design
  • Achieve a minimum of 95% deployment to all endpoints within each domain at each site for all necessary endpoint software agents. For the avoidance of doubt, if the OCF solution requires two (2) agents, then both shall be required to be deployed to each endpoint
  • Integrate each OCF solution with the NCIA’s existing data diode file transit mechanism to support the secure, one-way transfer of forensic artefacts (including files and disk images) from both the NR and NS OCF solutions into the Forensic Capability 3: Password Recovery and Associated Data Extraction (PRADE) within the NS SCF environment
  • Document the transfer workflow of the data diode file transit mechanism to support users transferring files from the OCF solution in each domain into the PRADE solution within the SCF environment
  • Execute the post-implementation test in accordance with the Test and Acceptance Plan (TAP), including:

ü Prove the functional capability of the intended update

ü Prove failover or resilience where the update pertains to offer such non-functional services

  • As part of Installation, implementation and testing, minor deviations from planned design and installation specifications may occur
  • Record all such deviations within a single copy of the approved documents during the implementation, referred to as Delta editions of the documentation
  • Through the course of the Schedule Installation and Implementation phase, record Delta editions of:

ü Site Installation Specification (SIS)

ü Site Installation and Cut over Plan (SICP)

ü Security Implementation Verification Procedures (SIVP)

ü System Design Specifications (SDS)

ü Site Activation Checklist

  • Support internal & NCIA Testing activities & contribute to the development of test scripts
Loading ...
Loading ...

Deadline: 31-12-2025

Click to apply for free candidate

Apply

Loading ...