2026-0097 Technical Lead Architect Support Services (NS) - TUE 8 Sep RELAUNCH

Over deze functie

BIDDING INSTRUCTIONS
Suppliers should address the following in their submission (maximum 4 pages).
Experience: Evidence of comparable assignments involving enterprise private cloud architecture, vCF / NSX-T / Cisco ACI, CyberArk PAM, and IaC adoption at scale.
Track Record: At least two references from similar engagements in the last 3 years, with measurable outcomes and client contacts.
Approach to Objectives: How the proposed candidate will cover both the architecture/governance and automation/IaC tracks concurrently, manage cross-team coordination, and ensure deliverables in Section 4 are met on schedule.

Deadline Date: Tuesday 8 September 2026
Requirement: Technical Lead Architect Support Services for the ITM Recovery Project
Location: On site NCI Agency The Hague / off-site (Contractor required on site at least 50% of the time)
Period of Performance: As soon as possible: 13 October (Tentative) 2026 until 31 December 2026, with possibility to exercise the following options:
2027 Option: 1 January until 31 December 2027.
2028 Option: 1 January until 31 December 2028.
Required Security Clearance: NATO SECRET (Alternatively eligibility for NS clearance and clearance process ongoing)

1. INTRODUCTION
The ITM Recovery Increment 1 (ITM RC1) project will replace the legacy Automated Information Systems (AIS) NS classification network with a modernized ITM Operational Network (ON) at NS in a private cloud across the NATO Command Structure (NCS). The project structure includes 14 Work Packages, organized in 4 pillar teams with about 30 people interacting daily with each other and externally too. This task falls under WP07 System Integration scope.
2. OBJECTIVES
NCI Agency seeks an experienced Solution Architect to provide expert guidance and hands-on coordination across the design, validation, and implementation of a large-scale enterprise private cloud. The engagement spans two closely related tracks:

• Architecture & governance: Validate and steer the enterprise solution architecture for a private, air-gapped cloud environment serving 20,000-50,000 users across 20+ locations, built on VMware Cloud Foundation (vCF) 9, NSX-T, Cisco ACI, Palo Alto, HP, and Rubrik systems.

• Automation & IaC adoption: Validate, specify, and coordinate the implementation of cloud infrastructure through automation and Infrastructure as Code, and enable the IT organisation to adopt these as its standard operating model.
The solution architect will join the team ensuring design and implementation coherency across the different design and engineering teams (involving IaaS, WAN, Cyber Security Services, PAM, PKI, Enterprise SMC/BMC etc.)
3. SCOPE OF WORK
3.1 Architecture Validation & Guidance

• Review and validate the design documents for the private air-gapped cloud (vCF 9, NSX-T, Cisco ACI), identifying gaps, risks, and non-conformances against best practices, dependencies and overarching NATO architecture and directives documents.

• Provide design guidance to infrastructure and platform teams throughout the implementation lifecycle.

• Define and maintain architecture decision records (ADRs) and ensure traceability from requirements to design.
3.2 Interface Control & Integration

• Define and specify Interface Control Documents (ICDs) between the private cloud infrastructure and all producer/consumer services.

• Ensure interfaces are designed with security, observability, and automation in mind.

• Maintain an interface register and track ICD sign-off across workstream owners.
3.3 Cross-team Coordination

• Coordinate design and implementation efforts between the cyber security team and the infrastructure team, specifically covering: Privileged Access Management (PAM) implementation via CyberArk; PKI design and certificate lifecycle management; and Cyber Security Monitoring capability integration with the private cloud.

• Chair or co-chair joint design sessions and resolve cross-team technical dependencies.
3.4 Automation & IaC Enablement

• Validate and guide implementation of infrastructure automation using Ansible / AAP, Terraform, Jenkins, and vCF Automation.

• Define the automation and IaC target operating model for the cloud platform team.

• Advise on and document the transition from traditional infrastructure support to an automation-first operating model.

• Support upskilling of cloud operating teams in automation principles and tooling.
The Contractor will be part of a team and will provide services using Agency tools and reporting. There will be monthly planning and review meetings, weekly scrum meetings to track progress and more asynchronous meetings based on deliverables for the areas identified above.
4. DELIVERABLES
The product scope and prioritization of the deliverables will be specified in the monthly sprints described below (agreements with the line manager), and will include:

• Architecture/Design decision records (ADRs) — initial set covering key design choices.

• Interface Control Documents (ICDs) — for all primary producer/consumer interfaces (validation/coordination of interfaces details required).

• Interface register established and under change control.

• Design review reports, including of complex Interfaces/Integration e.g: IaaS SDP: vCF 9 / NSX-T / Cisco ACI (findings, risks, recommendations); PAM / CyberArk integration (people/process/technology); NATO PKI design reviews (integrations with the NATO PKI services); Cyber Security Monitoring integration (Interfaces with NATO Cyber Security Services); Disaster and Recovery procedures and implementation; Automation & IaaC target operating model document; IaaC implementation validated (Ansible Automation Platform / Terraform / vCF Automation / Cisco ACI / Palo Alto/ Rubrik); Automation adoption roadmap for cloud operating teams.
5. EXECUTION
5.1 Sprint Planning
Objective: Plan the objectives for the upcoming sprint, as a part of the overall plan.
Kick-off meeting: The Contractor shall conduct a monthly meeting with the…