Her Majesty's Passport Office - Information Assurance Architect

Tender description

Who Speclialist Work With You will work as part of a Technical Design Authority who are responsible for specific domains. They will need to collaborate closely with delivery teams in a multi-supplier environment. HMPO is moving from a large outsourced SI arrangement to an in-house, largely cloud based and open source based solutions delivered iteratively. Legacy technologies inc Oracle and Tibco. Strategic technology stack is based on Microservices architecture including Java, Node JS, ELK, Postgres, MongoDB, AWS, Puppet, Chef What Specialists Work On The resource will be required to: 1. Ensure that specified security controls or other counter-measures they specify to mitigate, minimise, or treat discovered risks are pragmatic (in order to meet the requirements of the business), appropriate (i.e. commensurate with the classification and sensitivity of information assets) and cost effective (whilst appropriately technically mitigating threats to assets) 2. Lead information assurance activities against solution designs to ensure they are appropriately secure. Where the Work Takes Place London, Westminster Early Market Engagement Working Arrangements Typically on-site with wider team and clients in an Agile environment. Some site visits. Use of Confluence, Jira and ardoq are the tools used to track progress against deliverables. Work Location London, Westminster Security Clearance SC Clearance is required. HM Passport Office will support the clearance process. Additional T&Cs Skills & Experience Have proven track record of risk assessing and assuring cloud based architectures for large and complex organisations ensuring information assets are securely managed Have in-depth understanding of cloud based and traditional security technologies and an in depth understanding of security specific protocols (e.g. TLS, Kerberos and SAML) Experience with using attack tree methods for conducting risk assessments Have in-depth understanding of outcome based approach to risk identification, management and mitigation using techniques such as risk trees Good understanding of Identity management, identity lifecycle management Hold CCP IA Architect and LCCP Nice to Haves Experience of Home Office/ HMPO systems or similar government operational systems Experience of GDS best practices No. of Specialists to Evaluate 3 Cultural Fit Criteria Work as a team with our organisation and other suppliers Be transparent and collaborative Be comfortable standing up for their discipline Have a no-blame culture and take responsibility for their work Assessment Method Evaluation Weighting Technical competence 65% Cultural fit 15% Price 20% Questions from Suppliers Budget range