ISS Technical Support Specialist (PKI)

Tender description

Why the Work is Being Done There is a requirement for a Defence Public Key Infrastructure (DPKI) Root Certification Authority (DRCA) and Level 1 CA PKI specialist. Problem to Be Solved The specialist will primarily work on the DRCA, and will also support the implementation of an interim Level 1 CA. The specialist will lead on DRCA key signing operations such as issuing of ARL\CRL, Level 1 CA Certificates, Cross-Certificates, OCSP certificates and end entity certificates for Administrators. The PKI specialist will use the DRCA Test and Development environments to prepare for activity on the live DRCA and Level 1 CA. The DRCA and Level 1 CA rely on VMWare\Hyper-V, Microsoft and Entrust for CA software and Gemalto HSMs for key storage and generation. Who Are the Users N/A Early Market Engagement Work Already Done Existing Team The PKI specialist will work with the PKI technician (who manages the DRCA environments), Crypto Services for Defence and ISS (Design & Operate) for task prioritisation. Current Phase Live Work Location ISS, MOD Corsham, Westwells Road, SN13 9NR. Building 405 E3, Campus Distribution and Building 410; AND ARMY Headquarters, Marlborough Lines, Andover, Hampshire Working Arrangments All tasking will take place from MoD Corsham and you are required there on average 2 days a week (Up to a maximum of 72 days over initial 9 month period). The working day is to be 8 hours to include 30 minutes for lunch. Occasional day visits may be required to Boddington in Gloucestershire or Andover in Hampshire. Overnight visits will only be permitted if permission is sought in advance. The individual will report to ISS Des-Arch34-Arch (Gareth Hind). Security Clearance SC Clearance must be in place prior to commencing work due to the projects the individual is required to work with. DV is preferred. Additional T&Cs Skills & Experience Demonstration of designing, developing and operating highly available PKI services. Weighting 16.00%. Demonstration of designing, developing, building and operating Entrust (EASM and EAAS), and Microsoft CA (ADCS). Weighting 16.00%. Show evidence of experience with Gemalto Luna SA5 HSM product, its integration with CAs and key signing ceremony controls. Weighting 16.00%. Show evidence of experience of security aspects, controls and accounting within a PKI environment. Weighting 16.00%. Nice to Haves Show evidence of experience developing and managing infrastructure services such as VMWare ESXi and Active Directory. Weighting 12.00%. Demonstration of writing Certification Practice Statements (CPS) and compliance with a Certificate Policy (CP) and RFC3647. Weighting 12.00%. Show knowledge and experience of IETF RFC5280 and certificate profiles based on RSA and EC. Weighting 12.00%. No. of Suppliers to Evaluate 5 Proposal Criteria Approach and methodology How the approach or solution meets user needs Cultural Fit Criteria Show evidence of transparency and collaboration in decision making. Demonstrate the ability and desire to share and transfer knowledge. Demonstrate the ability to recognise and adapt to change in the organisation. Payment Approach Fixed price Assessment Method Written proposal Work history Reference Evaluation Weighting Technical competence 65% Cultural fit 5% Price 30% Questions from Suppliers Budget range £850.00 maximum day rate. this role is inside ir35.