ECTL_SRC_250016_Linux Security Tasking Support

Linux Security Tasking Support

Location:
176 days remote and 44 days on site (Maastricht Upper Area Control Centre (MUAC)

Security Clearance:
No SC needed

Reference No:
ECTL_SRC_250016

Introduction

EUROCONTROL, the European Organisation for the Safety of Air Navigation, has 42 Member States and is a civil-military intergovernmental organisation committed to building, together with its partners, a Single European Sky, i.e. arrangements allowing the air navigation management system in Europe to achieve the level of performance required for the coming decades.

The EUROCONTROL Agency, which was set up to carry out the Organisation’s mission, provides sustained support for all its Member States, for the European Commission and for the European Aviation Safety Agency (EASA). This assistance is provided in numerous fields, in particular those of regulation, general oversight of air navigation management arrangements, and the environment. The EUROCONTROL Agency is also tasked with the permanent monitoring of the performance of the air navigation management system in place in Europe and of the associated civil-military coordination.

As one of EUROCONTROL’s Directorates, the Maastricht Upper Area Control Centre (MUAC) manages the upper airspace (from 24,500 to 66,000 feet) over Belgium, the Netherlands, Luxembourg and north-west Germany - one of Europe’s busiest and most complex airspace areas. MUAC is dedicated to deliver customer-focused, reliable and impartial air traffic management services. MUAC is a cross-border civil-military air navigation service provider in Europe and plays a pivotal role in integrating European airspace, building services around traffic flows not national borders.

The purpose of this tender is to implement a Linux Security Tasking Support Contract, to ensure the completition of tasks requests tracked in JIRA, by external Linux Security Specialists with the required minimum qualification and expertise.

The external Linux Security Specialists shall complete efficiently the task requests, which are monitored in the Kanban board. The number of working days needed to complete the list of tasks tracked in JIRA, will be evalauted on basis of the number of tasks to be completed per month. The effort is estimated to be up to two (2) external Linux Security Specialists (remote and on site).

Please note that MUAC will continue to perform administration, configuration and planning via the in-house experts employed at Maastricht UAC and wherever and whenever deemed necessary will request external support for specific tasks under the above-mentioned support.

Skills, knowledge, experience required:

• Education: Bachelor’s degree or an equivalent to a Bachelor University Diploma, in the ICT domain or relevant engineering
• Ability to Listening-Reading-Writing-Speaking in English at level C1/B2/B2/C1 (the English skill levels may be further evaluated during an interview),
• The assigned specialists shall have in the last 3 years’, minimum twenty-four (24) months experience in the domain of Linux Security to be proven by the description of the knowledge and work/ project performed in this domain.
• The assigned specialists shall have the all the following certifications: LPI or equivalent (Red Hat/SUSE/…), and certification CKA and CKS
• The assigned specialists shall have a minimum of one (1) year of experience in automation (proof in CV)

Technical Competences:

• The assigned specialists shall have minimum five (5) years of experience and shall be proven by a detailed description and a provision of at least one (1) project in each of the 4 in the domains of: Linux Security, DevSecOps, Security Patching, Certificate handling,
• The specialists shall have at least one year experience with Kafka/Kafka security,
• The specialists shall have at least one year of experience with StrongDM.
• The specialists shall have at least one year of experience with FluxCD and in addition at least one year of experience with Kyverno
• The specialists shall have at least one year of experience with RHEL/SLES and in addition at least 1 year experience with patching
• The specialists shall have at least one year of experience with Kubernetes
• The specialists shall have at least one year of experience with SELinux
• The specialists shall have at least one year of experience with TerraForm
• The specialists shall have at least one year of experience with Ansible

Deliverables:
The tenderer shall provide on request tasking support, based on specific tasks issued in JIRA, the following mandatory services:

• Expert support for Linux Security
• Latest Kubernetes security configurations
• Support prototype and research projects where Linux Security is needed
• Hybrid cloud security automation tasks
• Expert support for Linux Security Activities in projects and studies involving SOV

The deliverables under the required support will be specified in the Tasks assigned via JIRA and as per tasking procedure. The tasks to be completed may be from various types, difficulties and activities. The list below is providing some example of standard tasks to be completed when assigned in JIRA. This represents a non-exhaustive list of example of tasks:

• Setup a Secret store Vault (multiple weeks task)
• Define and document patching policy for the Vault (several days task)
• Plan, build and implement the next DevSecOps toolchain version (several weeks task)
• Modify security permissions on a Linux system (few hours task)
• Integrate and setup policies, via IaC, a system in the StrongDM PAM solution (1 day task)
• Setup a new Kafka instance with security permissions for a new client (several days task)
• Define and implement Kubernetes security settings for a new product (several days task)

In addition to the non-exhaustive listed tasks, when required the Linux Experts shall be able to complete other additional or different tasks related to Linux on basis of the service needs.

In this frame, the required support has been grouped into 2 deliverables:

D1 : Delivery of tasking services with focus on Linux Security (at least 1 day a week onsite on average, more on site presence might be required when the nature of the tasks requires on site presence)

D2: Follow up and report on status of tasks on a weekly basis (at least 1 day a week onsite on average, more on site presence might be required when the nature of the tasks requires on site presence)

Work breakdown

Due date

Deliverable ID

Deliverable description

Continuous

D1

Perform the technical tasks, track them in Jira, for working on Linux Security

Continuous

D2

Report via JIRA on weekly basis the status of the tasks. Each task has a state on the kanban board. Meetings via teams or onsite will be planned to discuss and adapt the task planning

VECTOR SYNERGY sp. z o.o., ul. Marcelińska 90, 60-324 Poznań, NIP PL7811857270, REGON 301575740, KRS: 0000369575
Rejestr Przedsiębiorców KRS prowadzony przez Sąd Rejonowy Poznań – Nowe Miasto i Wilda w Poznaniu, VIII Wydział Gospodarczy KRS, kapitał zakładowy wynosi: 73.852,80 złotych wpłacony w całości, TEL 48 616684500, FAX 48 616684501, www.vectorsynergy.com, info@vectorsynergy.com