CyberSecurity Architect

Tender description

Summary of the work Design & deliver, secure (agile driven), cloud based, security architecture. Ensure that specified security controls/counter-measures mitigate, minimise, or treat discovered risks are pragmatic, appropriate and cost effective Technical assurance of projects to ensure they comply with the security architecture, covers both new systems and their integration with legacy Specialist role Cyber security consultant Expected Contract Length 12 months Latest start date 02/04/2017 Maximum Day Rate No maximum is set. Will look for best vfm offering that market provides. Who Speclialist Work With Part of both the TDA team and the Platforms (Devops) team who manage our cloud platform. What Specialists Work On 1. Defining the security architecture for our digital platform (Platform, endpoints, networks & application) 2. Demonstrating how security architecture addresses technical risks identified by independent IA team 3. Assuring end to end technical security where shared solutions are being used 4. Focus is on cloud architectures but will also include Crown Hosted solutions where applicable Skills & Experience • Have proven track record of designing accredited cloud based security architectures • Have in depth knowledge of AWS security tools • Experience of Automated security testing tools • Experience of delivering Open Source security controls • In depth understanding of cloud technologies. Specifically, secured cloud solutions previously on cloud platforms (e.g. MS, AWS, Google, Skyscape) • experience of a broad range of networks and underlying IT technologies and environments • Experience of Container technologies like Docker and Kubernetes • in depth understanding of cloud based and traditional security technologies and an in depth understanding of security specific protocols (e.g. TLS, Kerberos and SAML) • In depth experience and understanding of systems similar to those used by HMPO and the challenges faced with migrating off them. Ideally experience of HMPO systems • hold LCCP IA Architect and CCP SIRA Work Location London with occasional travel in UK Working Arrangments Typically on-site with wider team and clients as this best supports the Agile ways of working being adopted. Use of Confluence and Jira expected to track progress against deliverables Security Clearance SC No. of Specialists to Evaluate 5 Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Be transparent and collaborative when making decisions • Have a no-blame culture and encourage people to learn from their mistakes • Take responsibility for their work • Be comfortable standing up for their discipline • Can work with clients with low technical expertise • Share knowledge and experience with other team members • Challenge the status quo Evaluation Weighting Technical competence 75% Cultural fit 5% Price 20% Questions from Suppliers 1. IR35 Status IR35 status is current being determined for all HO contracts. 2. Qualifications essential or will you accept candidates who have experience or close to the qualifications asked? Strong preference for the qualifications asked. 3. Homeworking acceptable Where jointly agreed this is acceptable, Expected that due to Agile ways of working face to face in the same office will be the norm though 4. SC Clearance essential or is willingness to undergo SC ok? Preference is to have SC clearance already but may wait for the best candidate to get SC clearance