云平台与安全顾问
Cloud Platform and Security Consultant
远程职位
Sabot Consulting 正在组建一个独立评估团队，对一项大型、多年期的公共部门企业现代化项目进行为期四个月的一次性回顾性评估。
这是一项评估工作，而非实施工作。你不会进行构建、配置、集成、修复或运营任何内容。你将审查已构建的内容，审查证据，采访相关建设人员，并为高层领导得出独立且有依据的结论。与项目实施供应商保持独立是该工作的合同要求。
评估范围涵盖九个评估领域和65项具体评估要求：项目治理与风险、业务流程对齐、架构与设计、集成与数据管理、大型机与遗留系统现代化、安全与隐私合规、软件开发生命周期与配置管理、测试与质量保证、以及运营准备度。技术环境包括一个主要的云客户关系管理平台、一个公共云基础设施资产、一个企业集成平台、一个内容管理平台、智能文档处理，以及一个大型机迁移重构方案。
交付成果包括评估管理计划、初始评估报告、定期状态简报、各领域评估报告、准备度评估、高管简报和最终评估报告。
你将在四个月内以小型配对团队的形式与高级同事一起全职工作。发现结果将直接提交给高层领导和立法监督机构。
要求
- 10年以上云架构经验，具有深入的 Amazon Web Services (AWS) 经验 —— 网络设计、身份与访问管理、安全组、监控、弹性、灾难恢复和治理控制
- 安全架构评估 —— 身份与访问管理、加密、日志记录、监控和追踪安全需求直至其在配置中的实现
- CJIS 合规经验 —— 高优先级。CJIS 代表刑事司法信息服务中心，是美国联邦调查局（FBI）的安全政策，用于规范刑事司法数据的处理。客户持有执法数据并雇佣了宣誓调查员，因此这是真实的需求，而非可选条件。
- 隐私控制、记录保留和审计日志评估
查看英文原文
Remote role
Sabot Consulting is assembling an independent assessment team to conduct a one-time retrospective assessment lasting four months of a large, multi-year public-sector enterprise modernization program.
This is an assessment engagement, not an implementation. You will not build, configure, integrate, remediate, or operate anything. You will examine what has already been built, review the evidence, interview the people who built it, and reach independent, defensible conclusions for executive leadership. Independence from the program's implementation vendors is a contractual requirement of the engagement.
The scope covers nine assessment domains and 65 discrete assessment requirements: program governance and risk, business process alignment, architecture and design, integration and data management, mainframe and legacy modernization, security and privacy compliance, software development lifecycle and configuration management, testing and quality assurance, and operational readiness. The technology environment includes a major cloud customer relationship management platform, a public cloud infrastructure estate, an enterprise integration platform, a content management platform, intelligent document processing, and a mainframe lift-and-refactor migration.
Deliverables include an assessment management plan, an initial assessment report, recurring status briefings, per-domain assessment reports, readiness assessments, an executive briefing, and a final assessment report.
You will work full time for four months in a small paired-team structure alongside senior peers. Findings go directly to executive leadership and to a legislative oversight body.
Required
- 10 or more years in cloud architecture with deep Amazon Web Services (AWS) experience — network design, identity and access management, security groups, monitoring, resilience, disaster recovery, and governance controls
- Security architecture assessment — identity and access management, encryption, logging, monitoring, and tracing security requirements through to their implementation in configuration
- CJIS compliance experience — high priority. CJIS stands for Criminal Justice Information Services, the United States Federal Bureau of Investigation security policy that governs handling of criminal justice data. The client holds law enforcement data and employs sworn investigators, so this is a real requirement, not a nice-to-have.
- Privacy controls, records retention, and audit logging assessment
- Vendor risk management and software supply chain security — including SBOM
About Us: Sabot Consulting is a management consulting company focused on providing technical and management consulting to IT executives and managers in strategic, operational, and project-based practice areas. Our focus on providing expert staff that have the knowledge, experience, and professionalism to engage the client at all levels is the key to our success.
Originally posted on Himalayas