Job Description
Job ID: HNMJD2664
Role: ITSM Security Architect
Location: Brussels, Belgium
Description:
Client has initiated an ICT transformation initiative, with the objective of maximizing value for the ICT investments made, under the Customs and Fiscalis programmes, and to respond to future challenges in a more agile way, by adopting a modern way of working. As part of this initiative, DevSecOps is a key priority area, which will significantly transform the EC IT landscape, by introducing new architecture and technologies, such as Infrastructure as a Code (IaC), containerisation and orchestration (VMWare Tanzu), as well as the DevSecOps pipeline and cloud.
The consultant requested will participate in IT architecture evolution initiatives, security programmes, and activities supporting the implementation of the DevSecOps transformation, and will be expected to (non-exhaustive list):
•Propose security systems, security components and/or services architecture (e.g. SOA, ESB, MDM, legacy, framework, security), COTS software products, standards and/or evaluate technical offers from EC contractors, ensuring European Commission security requirements (based on ISO2700x) are followed;
•Make proposals for architecture governance and/or evaluate technical offers from EC contractors;
•Investigate and recommend security solutions (including cost benefit analyses, assessment of implementation's duration), and/or evaluate technical solutions proposed by EC contractors;
•Understand, apply and suggest improvements of EC methodologies (e.g. TEMPO, RUP@EC, CoRA), security policies, tools, best practices, etc.;
•Support projects by designing security services and components (or supervising contractors' design), encouraging re-use as well as committing that the design of the system will fulfil the system's requirements, in particular non-functional requirements (volume, scalability, confidentiality, integrity, availability, business continuity and disaster recovery planning);
•Ensure that the systems', components' and/or services' design is consistent with EC architecture (e.g. consistency with a EC framework);
•Analyse the integration of different information systems and ensure their interoperability;
•Provide advice and consultancy;
•Participate in brainstorming, meetings and workshops with EC, contractors, MS and/or other partners;
•Follow up technology and services evolution in the relevant areas;
•Structure the information in ways that are appropriate to the target audience;
•Produce, review and evaluate technical documents. It includes reviewing technical offers from EC contractors;
•Study (or supervise the study of) adequacy and impact of new technology or new versions of COTS/OSS on EC systems;
•Report to the designated EC official(s).