安全架构师
Security Architect
Intelance 正在为一项重要的英国企业技术项目定义阶段聘请一名安全架构师作为合同成员。您将对拟议的集成方案进行重点安全审查，并与 Intelance 的首席企业架构师、主集成架构师和 Oracle 技术架构师合作。这项工作将确定系统、API、文件、身份和敏感数据连接的安全要求。预计投入时间为 8 至 10 周内约 5 天。交付方式主要是远程，必要时会有少量计划内的出差。
任务
- 审查影响集成、Oracle、定制应用和外部连接的当前安全控制措施。
- 为 API、消息传递、文件传输和服务账户定义安全要求。
- 确定身份、访问、认证、授权和特权访问的要求。
- 定义加密、密钥和秘密管理的要求。
- 定义日志记录、监控、警报和审计的要求。
- 审查网络边界和数据流中的安全风险。
- 识别连接上线前所需的控制措施。
- 为平台和供应商选择提供安全问题和评分标准。
- 对安全风险进行排序并推荐实际的处理方案。
- 生成简洁的安全架构审查和要求集。
要求
- 至少 8 年的安全架构经验。
- 在设计 API 和企业集成安全方面有较强的实际经验。
- 精通身份和访问管理、服务账户、密钥、加密、API 网关、网络隔离、日志记录和监控。
- 有在遗留系统和现代集成平台之间工作的经验。
- 能够进行威胁建模并将风险转化为明确的技术要求。
- 能够向非技术人员领导清晰地解释安全决策。
- 英语书面和口语表达清晰。
- 位于英国，拥有在英国工作的权利。
- 在 8 至 10 周内可安排约 5 天的工作时间。
具有 Oracle 或 ERP 系统经验者优先。在制造、分销或供应链行业有经验者也优先。具有 NCSC 指南或 ISO 27001 环境经验者也优先。
福利
- 每天 500 英镑至 675 英镑，根据直接相关经验而定。
- 在约定的 8 至 10 周期内，交付方式灵活。
- 可直接接触 Intelance 的首席企业架构师和高级客户。
查看英文原文
Intelance is appointing a Security Architect as a contract associate for the definition phase of a major UK enterprise technology programme. You will provide a focused security review of the proposed integration approach and work with Intelance's Chief Enterprise Architect, Lead Integration Architect and Oracle Technical Architect. The work will set the security requirements for how systems, APIs, files, identities and sensitive data connect. The expected commitment is about 5 days across an 8 to 10 week period. Delivery will be mainly remote, with limited planned travel where needed.
Tasks
- Review the current security controls affecting integrations, Oracle, bespoke applications and external connections.
- Define security requirements for APIs, messaging, file transfer and service accounts.
- Set identity, access, authentication, authorisation and privileged access requirements.
- Define encryption, key and secret management requirements.
- Define logging, monitoring, alerting and audit requirements.
- Review network boundaries and data flows for security risks.
- Identify the controls required before a connection can go live.
- Provide security questions and scoring criteria for platform and supplier selection.
- Rank security risks and recommend practical treatment.
- Produce a concise security architecture review and requirements set.
Requirements
- At least 8 years of security architecture experience.
- Strong recent experience designing security for APIs and enterprise integrations.
- Strong knowledge of identity and access, service accounts, secrets, encryption, API gateways, network separation, logging and monitoring.
- Experience working across legacy systems and modern integration platforms.
- Able to run threat modelling and turn risks into clear technical requirements.
- Able to explain security decisions clearly to non technical leaders.
- Clear written and spoken English.
- Based in the United Kingdom, with the right to work in the United Kingdom.
- Available for about 5 days across an 8 to 10 week period.
Experience with Oracle or ERP estates is useful. Experience in manufacturing, distribution or supply chain businesses is also useful. Experience with NCSC guidance or ISO 27001 environments is useful.
Benefits
- £500 to £675 per day, depending on directly relevant experience.
- Flexible delivery pattern across the agreed 8 to 10 week period.
- Direct access to Intelance's Chief Enterprise Architect and senior client technology leaders.
- A focused piece of work with named outputs and decision points.
- Potential follow on security assurance work, subject to programme approval and performance.
- Pre agreed travel expenses paid separately.
Please apply with a current CV. The process is a short screening form, a 30 minute introductory call and one focused technical discussion. We will move quickly and keep the process clear. The engagement will be subject to contract, reference checks and an IR35 status assessment.
Originally posted on Himalayas