FCO cloud application security

Tender description

Who Speclialist Work With The specialist will be working with the FCO data science team, which sits within the FCO's Open Source Unit (OSU). There is a possibility that we will also seek help from other external experts, who will also form part of the project team. What Specialists Work On We require a security expert to ensure that two cloud applications we are launching (one developed in-house and one based on open source) meet the appropriate security accreditations for official government data. We anticipate that this will process will include: - architecture advice, assessment and development support to maximise security - providing a user authentication process - implementing any further barriers to prevent unauthorised access - end-to-end masking of user interactions - compilation of necessary security accreditation documentation We may merge these two applications further down the development process; the security arrangements must allow for this. Where the Work Takes Place Work will be done in the FCO's London office in King Charles Street London. Some work can be done off site if the specialist wants or needs to, but the specialist must be present two days per week to enable effective discussion and decision making. Early Market Engagement While we have conducted user research which is guiding our development, this has been peripheral to the security requirement of the two products, which has always been seen as a necessity. Working Arrangements We would like the individual to: Be comfortable talking to non-technical staff and translating their requirements into technical terms Be a good listener Where appropriate, propose changes to processes We would like to be able to send the specialist unaccompanied to meet technical and non-technical staff, confident that they will be respectful, productive, and represent the Digital transformation unit well. Work Location Work will be done in the FCO's London office in King Charles Street London. Some work can be done off site if the specialist wants or needs to, but the specialist must be present two days per week to enable effective discussion and decision making. Security Clearance FCO offices are secure buildings and the specialist will required SC clearance. The timeframe of the project will not allow sufficient time for clearance to be arranged for specialists that do not currently have it. Additional T&Cs Standard contract Skills & Experience Demonstrable understanding of government cyber security requirements for official data - 20 points Demonstrable experience in developing secure user authorisation and user interaction masking - 20 points Demonstrable experience in producing documentation to evidence security credentials - 15 points Working in an agile team to deliver software based on user requirements - 10 points Nice to Haves No. of Specialists to Evaluate 3 Cultural Fit Criteria Demonstrable experience of working with technical and non-technical staff to understand requirements Demonstrable experience of building good relationships and trust with teams both with and without departmental sponsors Demonstrable expereince of quickly joining teams and understanding their needs Demonstrable experience working in an agile manner Assessment Method Evaluation Weighting Technical competence 50% Cultural fit 20% Price 30% Questions from Suppliers Budget range