Cyber Security Architect

Tender description

Summary of the work - Delivering & maintaining digital security architectures (Platform, endpoints, networks & application) - The security of the AWS platform & hosted applications - Supporting development & maintenance of: o Security architecture o Information Risk Assurance Reports o Risk discovery, treatment & analysis - technical assessments of IT products & services Specialist role Cyber security consultant Expected Contract Length 12 months Latest start date 31/1/2017 Who Speclialist Work With You will be part of HMPO's Technical Design Authority What Specialists Work On The requirement is to procure a Digital Cyber Security Architect to design and deliver, secure (agile driven), cloud based, digital IT solutions. The resource will be required to ensure that specified security controls or other counter-measures they specify to mitigate, minimise, or treat discovered risks are pragmatic (in order to meet the requirements of the business), appropriate (i.e. commensurate with the classification and sensitivity of information assets) and cost effective (whilst appropriately technically mitigating threats to assets) Additionally, the resource will be required to assist IA resources with information assurance activities against solution designs to ensure they are appropriately secure. Skills & Experience • experience of delivering open source security controls • experience of physically delivering secure, digital, cloud hosted solutions using a variety of security products from a wide spectrum of vendors. • experience of defining automated security testing • in depth understanding of cloud based and traditional security technologies and an in depth understanding of security specific protocols (e.g. TLS, Kerberos and SAML) • in depth understanding of cloud technologies. Specifically, should have secured cloud solutions previously on industry recognised cloud platforms (e.g. MS Azure or 365, AWS, Google, Skyscape) • experience of a broad range of networks and underlying IT technologies and environments • successful track record for design and delivery of new technologies into existing legacy environments • good understanding of Identity management, identity lifecycle management • be familiar with centralised authentication systems. In terms of technologies and methodologies. Should be familiar with authentication and authorisation technologies (e.g. AD, LDAP) Nice to Haves hold a LCCP or SCCP IA Architect and ideally a CCP as (preferably) a SIRA Work Location Westminster, London Working Arrangments Typically on-site with some travel to regional sites. Standard government terms for consultancy expenses apply Security Clearance Minimum SC or be prepared to undertake SC No. of Specialists to Evaluate 10 Cultural Fit Criteria • •Work as a team with our organisation and other suppliers • •Be transparent and collaborative when making decisions • •Take responsibility for their work • •Share knowledge and experience with other team members • •Challenge the status quo • •Be comfortable standing up for their discipline • •Can work with clients with low technical expertise Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers 1. Have you a maximum day rate for this role ? Up to £800 per day. 2. What is the size of the Cyber Security Team For the HMPO Digital Portfolio there are 2 roles, one focusing on Design and the other on Information Assurance. There are a few other security and IA roles looking at Legacy systems but much of the Design work is outsourced to the SI.