Cyber Security Architect

Tender description

Who Speclialist Work With You will be part of HMPO's Technical Design Authority What Specialists Work On The requirement is to procure a Digital Cyber Security Architect to design and deliver, secure (agile driven), cloud based, digital IT solutions. The resource will be required to ensure that specified security controls or other counter-measures they specify to mitigate, minimise, or treat discovered risks are pragmatic (in order to meet the requirements of the business), appropriate (i.e. commensurate with the classification and sensitivity of information assets) and cost effective (whilst appropriately technically mitigating threats to assets) Additionally, the resource will be required to assist IA resources with information assurance activities against solution designs to ensure they are appropriately secure. Where the Work Takes Place Westminster, London Early Market Engagement Working Arrangements Typically on-site with some travel to regional sites. Standard government terms for consultancy expenses apply Work Location Westminster, London Security Clearance Minimum SC or be prepared to undertake SC Additional T&Cs Skills & Experience experience of delivering open source security controls experience of physically delivering secure, digital, cloud hosted solutions using a variety of security products from a wide spectrum of vendors. experience of defining automated security testing in depth understanding of cloud based and traditional security technologies and an in depth understanding of security specific protocols (e.g. TLS, Kerberos and SAML) in depth understanding of cloud technologies. Specifically, should have secured cloud solutions previously on industry recognised cloud platforms (e.g. MS Azure or 365, AWS, Google, Skyscape) experience of a broad range of networks and underlying IT technologies and environments successful track record for design and delivery of new technologies into existing legacy environments good understanding of Identity management, identity lifecycle management be familiar with centralised authentication systems. In terms of technologies and methodologies. Should be familiar with authentication and authorisation technologies (e.g. AD, LDAP) Nice to Haves hold a LCCP or SCCP IA Architect and ideally a CCP as (preferably) a SIRA No. of Specialists to Evaluate 10 Cultural Fit Criteria •Work as a team with our organisation and other suppliers •Be transparent and collaborative when making decisions •Take responsibility for their work •Share knowledge and experience with other team members •Challenge the status quo •Be comfortable standing up for their discipline •Can work with clients with low technical expertise Assessment Method Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers Budget range