One of our partners are in need of a Medior or Senior Microsoft Azure Cloud Engineer/Administrator for a long-term project in the Zaventem region until 2027. Requiring at least 2 days of onsite work per week. Proficiency in English is acceptable, with a preference for French and/or Dutch language skills. Requirements: Bachelor's degree in IT, computer science, or a related field (preferred) Microsoft Azure certifications like Azure Solutions Architect Expert, Azure Administrator Associate, or Azure DevOps Engineer Expert 3-5 years of hands-on experience with Azure-based solutions Experience in developing, deploying, and managing cloud-based solutions using Azure services Proficiency in Infrastructure as Code (IaC) using tools like ARM templates, Azure Bicep, or Terraform Familiarity with Azure data services, CI/CD pipelines, security practices, monitoring tools, Scripting languages, and cloud security principles Optional: Experience with containerization, hybrid cloud solutions, and Kubernetes Responsibilities: Cloud Infrastructure Implementation: Design and deploy scalable, reliable, and cost-effective Azure solutions Collaborate with stakeholders to understand and translate business requirements into cloud architecture designs Configure and manage Azure resources, virtual networks, and networking components Utilize IaC tools for automated resource deployment Azure Security: Implement Azure Active Directory for identity and access management Configure RBAC and enforce security best practices and compliance measures Monitor security incidents, conduct audits, and implement security policies Monitoring and Performance Optimization: Utilize Azure Monitor and Azure Security Center for proactive monitoring Analyze performance metrics and optimize resource utilization Azure DevOps Integration: Collaborate with development teams to integrate Azure services into CI/CD pipelines Implement and manage Azure DevOps pipelines for automated deployment Data Management: Deploy and manage Azure data services, backup, recovery, and encryption strategies Disaster Recovery and High Availability: Implement and maintain disaster recovery and high availability solutions Conduct regular testing of disaster recovery plans Cost Management: Monitor resource consumption, implement budget controls, and recommend cost-effective solutions Skills Required: Azure Cloud System Engineering Azure DevOps Integration Experience with Azure Infrastructure Implementation IAM/Azure Security expertise Networking People (UK) is acting as an Employment Business in relation to this vacancy.
25/04/2024
Project-based
One of our partners are in need of a Medior or Senior Microsoft Azure Cloud Engineer/Administrator for a long-term project in the Zaventem region until 2027. Requiring at least 2 days of onsite work per week. Proficiency in English is acceptable, with a preference for French and/or Dutch language skills. Requirements: Bachelor's degree in IT, computer science, or a related field (preferred) Microsoft Azure certifications like Azure Solutions Architect Expert, Azure Administrator Associate, or Azure DevOps Engineer Expert 3-5 years of hands-on experience with Azure-based solutions Experience in developing, deploying, and managing cloud-based solutions using Azure services Proficiency in Infrastructure as Code (IaC) using tools like ARM templates, Azure Bicep, or Terraform Familiarity with Azure data services, CI/CD pipelines, security practices, monitoring tools, Scripting languages, and cloud security principles Optional: Experience with containerization, hybrid cloud solutions, and Kubernetes Responsibilities: Cloud Infrastructure Implementation: Design and deploy scalable, reliable, and cost-effective Azure solutions Collaborate with stakeholders to understand and translate business requirements into cloud architecture designs Configure and manage Azure resources, virtual networks, and networking components Utilize IaC tools for automated resource deployment Azure Security: Implement Azure Active Directory for identity and access management Configure RBAC and enforce security best practices and compliance measures Monitor security incidents, conduct audits, and implement security policies Monitoring and Performance Optimization: Utilize Azure Monitor and Azure Security Center for proactive monitoring Analyze performance metrics and optimize resource utilization Azure DevOps Integration: Collaborate with development teams to integrate Azure services into CI/CD pipelines Implement and manage Azure DevOps pipelines for automated deployment Data Management: Deploy and manage Azure data services, backup, recovery, and encryption strategies Disaster Recovery and High Availability: Implement and maintain disaster recovery and high availability solutions Conduct regular testing of disaster recovery plans Cost Management: Monitor resource consumption, implement budget controls, and recommend cost-effective solutions Skills Required: Azure Cloud System Engineering Azure DevOps Integration Experience with Azure Infrastructure Implementation IAM/Azure Security expertise Networking People (UK) is acting as an Employment Business in relation to this vacancy.
Technical Analyst - Citrix - Terraform - VMware - London. My Financial Services client are looking for a Technical Analyst to be rsponsible for end-to-end design, support, and improvement of Citrix environment, as well as provide strategic direction for Citrix and modern workspace environment. You will be implementing and supporting of my clients Citrix on-prem and Cloud environment, the engineering processes, and best practices to enable the infrastructure required for application hosting in public cloud. Responsibilities: Support and improve overall architecture of the Citrix environment Ownership of regular patching, risk and Pentest mitigations Assist across the technology and the business with new application deployments Ensure resilience, reliability and supportability across all areas of control Provide BAU third line technical support and fault resolution to the Service Desk and Application Support as required: Ensure checks, maintenance, domain, and data security at the highest level Provide technical and strategic guidance on any business projects requiring desktop/mobile services Proactively monitor and manage the operational health of the Citrix environment using Experience: Citrix XenDesktop, XenApp, Azure VDA and Citrix Cloud DaaS, Azure Cloud - (Must) Terraform, Azure ADO (Must) Microsoft Windows 10 and Windows Servers VMWare FSLogix Zscaler AppSense/Ivanti Modern Endpoint Management (MS InTune MDM & MAM, SCCM) DNS/DHCP/GPO PowerShell Windows 10 life cycle Management including Autopilot Identity and Access Management including AD, AAD, AAD Connect, SSO, MFA,Conditional Access, ADFS Exchange Online, Teams, or Mimecast, would be an advantage
25/04/2024
Full time
Technical Analyst - Citrix - Terraform - VMware - London. My Financial Services client are looking for a Technical Analyst to be rsponsible for end-to-end design, support, and improvement of Citrix environment, as well as provide strategic direction for Citrix and modern workspace environment. You will be implementing and supporting of my clients Citrix on-prem and Cloud environment, the engineering processes, and best practices to enable the infrastructure required for application hosting in public cloud. Responsibilities: Support and improve overall architecture of the Citrix environment Ownership of regular patching, risk and Pentest mitigations Assist across the technology and the business with new application deployments Ensure resilience, reliability and supportability across all areas of control Provide BAU third line technical support and fault resolution to the Service Desk and Application Support as required: Ensure checks, maintenance, domain, and data security at the highest level Provide technical and strategic guidance on any business projects requiring desktop/mobile services Proactively monitor and manage the operational health of the Citrix environment using Experience: Citrix XenDesktop, XenApp, Azure VDA and Citrix Cloud DaaS, Azure Cloud - (Must) Terraform, Azure ADO (Must) Microsoft Windows 10 and Windows Servers VMWare FSLogix Zscaler AppSense/Ivanti Modern Endpoint Management (MS InTune MDM & MAM, SCCM) DNS/DHCP/GPO PowerShell Windows 10 life cycle Management including Autopilot Identity and Access Management including AD, AAD, AAD Connect, SSO, MFA,Conditional Access, ADFS Exchange Online, Teams, or Mimecast, would be an advantage
Job: Security Architect Location: Reading, UK, Hybrid Job Type: Permanent Job Description We are seeking a highly skilled and experienced Security Architect to join our team who will be responsible for development of the Security Architecture that ensures the appropriate protection of all aspects of security, (people, process, electronic, data, physical) in Spring Fibre. You will be a subject matter expert and provide security guidance and recommendations to technology/business teams and contribute toSpring's security policies, standards, and guidelines related to information and Network security. This is a technical role and suitable for someone who has hands on experience in Cybersecurity. Responsibilities Help develop an Enterprise Security Architecture Framework, including patterns for identity & authentication, authorization and access control, cryptographic key and certificate management, auditing and security monitoring, data leakage prevention, privacy enhancement & protection and other standards in alignment with Enterprise Architect platforms. Establish metrics and monitoring to report the effectiveness and efficiency of the Security Architecture function. Identify, register and maintain security risks throughout their lifetimes, including agreeing treatment of risks with their owners, and reporting &escalating to Internal Audit and the CIO, when necessary. Develop, review and update security & privacy policies & standards and provide awareness guidelines, implementation and exceptions advice. Engage with owners & custodians of BAU IT systems to understand the architecture, data flow and security controls in their systems. Conduct periodic security compliance assessments and ISO 27001/2 reviews of BAU IT applications, infrastructures & ISMS. Review the security posture of potential M&A acquisition targets. Requirement Mapping long term business requirements to security architecture frameworks such as NIST, CIS etc. Experience delivering Hybrid Cloud and Internet facing applications with a strong focus on cyber security. Broad hands-on knowledge of Firewalls, intrusion detection systems, data encryption, and other industry-standard techniques and practices. Strong knowledge of IT infrastructure, IP Networking, security best practices, and automation technologies. Application security: including but not limited to: authentication, identity and access management, auditing, use of cryptography, data security, privacy enhancing technologies, web services security, OWASP, threat & vulnerability management and secure code development methodologies. Infrastructure security: including but not limited to: network security, host security, database security, device security, VPNs & SSLs, secure file transfers, security event monitoring, malware security and cyber security. Operational security: including but not limited to: incident management, change & patch management, data centre & physical security, backups, DR & BCP, outsourcing, managed services, cloud computing, asset management, cryptographic keys & certificate management, PCI DSS and DPA compliance and ISO 27001/2. Analysing network security controls, including Firewall and Router security configuration. Preferred Delivering the security review processes and frameworks, with full audit trail. Managing multiple security assessments and changing priorities, simultaneously Ensuring Security Architecture Review is built into group wide and business specific processes for acquiring and developing new technology,including developing any needed processes. Aligning business requirements to complex security architecture frameworks. Skills Required: In depth knowledge of: Firewall: Juniper/Cisco/PaloAlto. Onion Security, Splunk, Suricata, Kali. Application Security. Identity and Access Management. Data Protection. Endpoint Security. Cyber Security Operations. Experienced with Threat Modelling. Pen testing and basic incident response. Scripting languages ( python, or PowerShell/building dashboards/au-tomating common tasks) Preferred: Experience in designing systems against a zero-trust architecture. Experience with designing SOC architectures (ie SIEM, SOAR and vulnerability management solutions). Expert-level certification in either AWS or Azure, with a Security specialization. Experience in working within regulated environments, such as PCI-DSS Experience in defining secure development life cycles. Qualifications Bachelor's Degree in either Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, Math, Physics. CISSP, Certified Information Systems Security Professional, International Information Systems Security Certification Consortium (ISC2) Certification, Microsoft Azure Solutions Architect, or AWS Solutions Architect.
24/04/2024
Full time
Job: Security Architect Location: Reading, UK, Hybrid Job Type: Permanent Job Description We are seeking a highly skilled and experienced Security Architect to join our team who will be responsible for development of the Security Architecture that ensures the appropriate protection of all aspects of security, (people, process, electronic, data, physical) in Spring Fibre. You will be a subject matter expert and provide security guidance and recommendations to technology/business teams and contribute toSpring's security policies, standards, and guidelines related to information and Network security. This is a technical role and suitable for someone who has hands on experience in Cybersecurity. Responsibilities Help develop an Enterprise Security Architecture Framework, including patterns for identity & authentication, authorization and access control, cryptographic key and certificate management, auditing and security monitoring, data leakage prevention, privacy enhancement & protection and other standards in alignment with Enterprise Architect platforms. Establish metrics and monitoring to report the effectiveness and efficiency of the Security Architecture function. Identify, register and maintain security risks throughout their lifetimes, including agreeing treatment of risks with their owners, and reporting &escalating to Internal Audit and the CIO, when necessary. Develop, review and update security & privacy policies & standards and provide awareness guidelines, implementation and exceptions advice. Engage with owners & custodians of BAU IT systems to understand the architecture, data flow and security controls in their systems. Conduct periodic security compliance assessments and ISO 27001/2 reviews of BAU IT applications, infrastructures & ISMS. Review the security posture of potential M&A acquisition targets. Requirement Mapping long term business requirements to security architecture frameworks such as NIST, CIS etc. Experience delivering Hybrid Cloud and Internet facing applications with a strong focus on cyber security. Broad hands-on knowledge of Firewalls, intrusion detection systems, data encryption, and other industry-standard techniques and practices. Strong knowledge of IT infrastructure, IP Networking, security best practices, and automation technologies. Application security: including but not limited to: authentication, identity and access management, auditing, use of cryptography, data security, privacy enhancing technologies, web services security, OWASP, threat & vulnerability management and secure code development methodologies. Infrastructure security: including but not limited to: network security, host security, database security, device security, VPNs & SSLs, secure file transfers, security event monitoring, malware security and cyber security. Operational security: including but not limited to: incident management, change & patch management, data centre & physical security, backups, DR & BCP, outsourcing, managed services, cloud computing, asset management, cryptographic keys & certificate management, PCI DSS and DPA compliance and ISO 27001/2. Analysing network security controls, including Firewall and Router security configuration. Preferred Delivering the security review processes and frameworks, with full audit trail. Managing multiple security assessments and changing priorities, simultaneously Ensuring Security Architecture Review is built into group wide and business specific processes for acquiring and developing new technology,including developing any needed processes. Aligning business requirements to complex security architecture frameworks. Skills Required: In depth knowledge of: Firewall: Juniper/Cisco/PaloAlto. Onion Security, Splunk, Suricata, Kali. Application Security. Identity and Access Management. Data Protection. Endpoint Security. Cyber Security Operations. Experienced with Threat Modelling. Pen testing and basic incident response. Scripting languages ( python, or PowerShell/building dashboards/au-tomating common tasks) Preferred: Experience in designing systems against a zero-trust architecture. Experience with designing SOC architectures (ie SIEM, SOAR and vulnerability management solutions). Expert-level certification in either AWS or Azure, with a Security specialization. Experience in working within regulated environments, such as PCI-DSS Experience in defining secure development life cycles. Qualifications Bachelor's Degree in either Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, Math, Physics. CISSP, Certified Information Systems Security Professional, International Information Systems Security Certification Consortium (ISC2) Certification, Microsoft Azure Solutions Architect, or AWS Solutions Architect.
Lead IT Security Manager Permanent Birmingham - 2 Days per week on site £48,900 - £61,140 per annum My client in the Rail industry are looking for a Lead IT Security Manager to join their fast-paced Operations team on a permanent basis. The Lead IT Security Manager is responsible for is the effective management of the Security Operations pillar within the IT Security, Compliance & Identity function. This includes Security technology and Security Operations Centre management. Key focus areas for this role, the ideal candidate will have experience in each of the below; Threat & Vulnerability Management Security Operations Centre - 24/7 Outsourced Web & Content Filtering - ProofPoint, Zscaler, etc. Endpoint Security Infrastructure Security Accountabilities * Lead the Security Operations pillar, determining and delivering requirements, methods, and tools to provide value and reduce risk across proactive monitoring, incident response, threat management and vulnerability management (among other activity) . * Lead the creation and maintenance of Security Operations policy, standards procedures, and documentation (including playbooks and guidance). * Manage the application and compliance of security operations procedures, reviewing actual and potential security breaches, and ensuring their investigation. * Lead the Security Operations team's response to incidents, recommending actions and appropriate control improvements. * Monitor the external environment to gather intelligence on emerging technologies, documenting impacts, threats, and opportunities to IT. * Provide expert advice on threat intelligence activities, identifying which threat categories are most dangerous to the organization and how to defend against them. * Manage vulnerability assessment activities within company IT, providing expert advice where necessary in the review of vulnerability assessment tools and techniques. * Develop, maintain, and test Security Operations' incident management procedures, investigating escalated incidents and facilitating recovery post-incident resolution. * Lead Security Operations risk management activities, leading on the identification of risks and vulnerabilities and assessment of their impacts. * Manage and oversee the day-to-day activity of the SOC supplier who will deliver security capabilities, communicating their activity to relevant teams. * Manage the design, delivery, maintenance, and continuous improvement of the IT Security Ops capabilities in line with business needs. * Manage the Security Operations Centre (SOC) capability, ensuring effective protection, defence, and response to IT security risks. * Promote the Security, Compliance & Identity function to develop and enhance the team profile to develop enduring relationships with stakeholders and teams. * Implement a multi-year Security roadmap that provides proactive capabilities which enable business objectives. * Actively promote and embed Equality Diversity and Inclusion (EDI) in all your work, and support and comply with all organisational initiatives, policies and procedures on EDI. Skills: * Relationship Building. Ability to develop and maintain strong relationships with internal and external stakeholders. * Security Operations. Ability provide leadership for live security incidents and helping conduct robust investigations in order to identify corrective actions and see them through to completion. * Threat Intelligence. Ability to provide guidance on proactive threat identification, analysis, and mitigation. Skilled in actionable intelligence, industry sources, and general awareness of threat landscape. * Vulnerability Assessment. Ability to identify and classify security vulnerabilities in networks, systems and applications and mitigating or eliminating their impact. * Risk Management. Ability to identify IT security operations risks and the delivery of audit remediation activities. * Emerging technology monitoring. Ability to identify and assess new and emerging technologies, products, services, methods and techniques. Knowledge: * Knowledge of IT Service Frameworks, methodologies, and best practice such as ITIL v4 and Agile. * Knowledge of day-to-day activities and best practice within a SOC. * Knowledge of technical security such as Firewalls, network security groups, and access controls. Type of Experience: * Experience of leading a team through the full IT service life cycle, enhancing security posture, and evolving capabilities via continual service improvement. * Experience of leading live cyber incidents and the remediation actions. * Experience of partnering with supplier teams for managed services delivery of improvements. * Experience across the full IT security spectrum (software, Servers, infrastructure, and networks). * Experience designing and implementing secure systems, leading review where necessary of complex security issues. * Experience of enabling and informing risk-based decisions. * Experience dealing with the security implications of transformation and day-to-day product changes. * Experience working with system architectures, displaying a strong understanding of the impact of vulnerabilities on varied systems Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.
23/04/2024
Full time
Lead IT Security Manager Permanent Birmingham - 2 Days per week on site £48,900 - £61,140 per annum My client in the Rail industry are looking for a Lead IT Security Manager to join their fast-paced Operations team on a permanent basis. The Lead IT Security Manager is responsible for is the effective management of the Security Operations pillar within the IT Security, Compliance & Identity function. This includes Security technology and Security Operations Centre management. Key focus areas for this role, the ideal candidate will have experience in each of the below; Threat & Vulnerability Management Security Operations Centre - 24/7 Outsourced Web & Content Filtering - ProofPoint, Zscaler, etc. Endpoint Security Infrastructure Security Accountabilities * Lead the Security Operations pillar, determining and delivering requirements, methods, and tools to provide value and reduce risk across proactive monitoring, incident response, threat management and vulnerability management (among other activity) . * Lead the creation and maintenance of Security Operations policy, standards procedures, and documentation (including playbooks and guidance). * Manage the application and compliance of security operations procedures, reviewing actual and potential security breaches, and ensuring their investigation. * Lead the Security Operations team's response to incidents, recommending actions and appropriate control improvements. * Monitor the external environment to gather intelligence on emerging technologies, documenting impacts, threats, and opportunities to IT. * Provide expert advice on threat intelligence activities, identifying which threat categories are most dangerous to the organization and how to defend against them. * Manage vulnerability assessment activities within company IT, providing expert advice where necessary in the review of vulnerability assessment tools and techniques. * Develop, maintain, and test Security Operations' incident management procedures, investigating escalated incidents and facilitating recovery post-incident resolution. * Lead Security Operations risk management activities, leading on the identification of risks and vulnerabilities and assessment of their impacts. * Manage and oversee the day-to-day activity of the SOC supplier who will deliver security capabilities, communicating their activity to relevant teams. * Manage the design, delivery, maintenance, and continuous improvement of the IT Security Ops capabilities in line with business needs. * Manage the Security Operations Centre (SOC) capability, ensuring effective protection, defence, and response to IT security risks. * Promote the Security, Compliance & Identity function to develop and enhance the team profile to develop enduring relationships with stakeholders and teams. * Implement a multi-year Security roadmap that provides proactive capabilities which enable business objectives. * Actively promote and embed Equality Diversity and Inclusion (EDI) in all your work, and support and comply with all organisational initiatives, policies and procedures on EDI. Skills: * Relationship Building. Ability to develop and maintain strong relationships with internal and external stakeholders. * Security Operations. Ability provide leadership for live security incidents and helping conduct robust investigations in order to identify corrective actions and see them through to completion. * Threat Intelligence. Ability to provide guidance on proactive threat identification, analysis, and mitigation. Skilled in actionable intelligence, industry sources, and general awareness of threat landscape. * Vulnerability Assessment. Ability to identify and classify security vulnerabilities in networks, systems and applications and mitigating or eliminating their impact. * Risk Management. Ability to identify IT security operations risks and the delivery of audit remediation activities. * Emerging technology monitoring. Ability to identify and assess new and emerging technologies, products, services, methods and techniques. Knowledge: * Knowledge of IT Service Frameworks, methodologies, and best practice such as ITIL v4 and Agile. * Knowledge of day-to-day activities and best practice within a SOC. * Knowledge of technical security such as Firewalls, network security groups, and access controls. Type of Experience: * Experience of leading a team through the full IT service life cycle, enhancing security posture, and evolving capabilities via continual service improvement. * Experience of leading live cyber incidents and the remediation actions. * Experience of partnering with supplier teams for managed services delivery of improvements. * Experience across the full IT security spectrum (software, Servers, infrastructure, and networks). * Experience designing and implementing secure systems, leading review where necessary of complex security issues. * Experience of enabling and informing risk-based decisions. * Experience dealing with the security implications of transformation and day-to-day product changes. * Experience working with system architectures, displaying a strong understanding of the impact of vulnerabilities on varied systems Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.
Contract - SailPoint Engineer Rate: Open Location: Remote Duration: 6months + Qualifications 3+ years of hands-on experience with implementing and managing SailPoint Identity IQ environments. 3+ year of experience with Scripting languages (Java, BeanShell, XML, JavaScript, etc). 3+ years of experience or training in Identity systems security fundamentals design, implementation and troubleshooting across all computer/server platforms. Experience in designing and standing up a new SailPoint Identity IQ environment. Responsibilities Responsible for the administration, implementation and management of SailPoint Identity IQ. Including upgrading and patching of the environment. Designs, Develops Debugs, and Implements built-in and custom SailPoint connectors. Can develop SailPoint integrations utilizing SCIM and Web Services. Builds, Implements, and executes certification/recertification campaigns. Has understanding and has worked in environments utilizing secure code development strategies. Has a strong understanding of how to integrate with HR systems, including the leaver, joiner, mover workflows.
09/04/2024
Project-based
Contract - SailPoint Engineer Rate: Open Location: Remote Duration: 6months + Qualifications 3+ years of hands-on experience with implementing and managing SailPoint Identity IQ environments. 3+ year of experience with Scripting languages (Java, BeanShell, XML, JavaScript, etc). 3+ years of experience or training in Identity systems security fundamentals design, implementation and troubleshooting across all computer/server platforms. Experience in designing and standing up a new SailPoint Identity IQ environment. Responsibilities Responsible for the administration, implementation and management of SailPoint Identity IQ. Including upgrading and patching of the environment. Designs, Develops Debugs, and Implements built-in and custom SailPoint connectors. Can develop SailPoint integrations utilizing SCIM and Web Services. Builds, Implements, and executes certification/recertification campaigns. Has understanding and has worked in environments utilizing secure code development strategies. Has a strong understanding of how to integrate with HR systems, including the leaver, joiner, mover workflows.