T he Opportunity : Our client, an integrated infrastructure solutions business, is currently looking for an ICT Infrastructure Specialist to join their ICT Department based near Middlesbrough. Helping to maintain high levels of safety, availability and reliability for ICT services, by ensuring effective, accurate provision of a diverse range of ICT systems and services across company sites. Skills and Experience: Strong knowledge of Windows Server 2012/2016 in physical and virtual environments Good grasp of Active Directory, DNS and DHCP Thorough understanding of IP Networking and Routing Experience With SQL and Exchange Server An understanding of Cyber Security and Firewalls Role and Responsibilities: Provide support to the ICT Team on matters concerning infrastructure and applications Take full responsibility for the successful delivery of assigned projects Document and maintain configuration for the design, configuration, processes and tools of ICT infrastructure Act as an escalation point for difficult or complex incidents Assist with the day-to-day maintenance of the company endpoint management and reporting systems (Cyber Security, Active Directory, Group Policy) Please call Matthew Craig here at ISR Recruitment to learn more.
25/04/2024
Full time
T he Opportunity : Our client, an integrated infrastructure solutions business, is currently looking for an ICT Infrastructure Specialist to join their ICT Department based near Middlesbrough. Helping to maintain high levels of safety, availability and reliability for ICT services, by ensuring effective, accurate provision of a diverse range of ICT systems and services across company sites. Skills and Experience: Strong knowledge of Windows Server 2012/2016 in physical and virtual environments Good grasp of Active Directory, DNS and DHCP Thorough understanding of IP Networking and Routing Experience With SQL and Exchange Server An understanding of Cyber Security and Firewalls Role and Responsibilities: Provide support to the ICT Team on matters concerning infrastructure and applications Take full responsibility for the successful delivery of assigned projects Document and maintain configuration for the design, configuration, processes and tools of ICT infrastructure Act as an escalation point for difficult or complex incidents Assist with the day-to-day maintenance of the company endpoint management and reporting systems (Cyber Security, Active Directory, Group Policy) Please call Matthew Craig here at ISR Recruitment to learn more.
Global Technology Solutions Ltd
Edinburgh, Midlothian
Job Title: Infrastructure Support Engineer III Contract length: 3-months Day rate: £340 inside ir35 through umbrella Location: Edinburgh *Must be holding SC Clearance* Site hours are: 07:00 - 16:30 Mon-Thurs and 07:00 - 13:30 Fri - hours to be agreed ROLE OVERVIEW: We are looking for customer-focused and enthusiastic 3rd line infrastructure Support Engineer with a genuine interest in solving peoples IT issues to backfill our Business As Usual services while some of our key staff support a critical project. The applicant should be technically competent, possess good written and verbal communication skills and be willing to collaborate with the wider IT support teams. The 3rd line team members are expected to be specialists at solving a variety of software issues, while minimizing disruption to our users. A successful candidate will be someone who can blend first rate customer service with first rate technical skills. Previous experience resolving 2nd and 3rd line issues in an enterprise environment is essential. DETAILED JOB DESCRIPTION: * To manage a range of technologies such as Domain Central Services (Active Directory), SCCM - to include optimisation, interoperability, and availability * Hands on experience of day to day administration of Microsoft Active Directory including creation of users, security groups, GPO's and roaming profiles * Able to identify, define and resolve complex issues with Microsoft Windows and Office applications * Coach and educate the 2nd Line Engineers, in developing their skills to improve first time fix and overall team performance * Demonstrate resilience and the resourcefulness to work effectively under pressure and to tight deadlines * Ability to author documents such as reports, policies, procedures and workflows ESSENTIALS SKILLS/QUALIFICATIONS: * Active Directory * SCCM management & operation (or similar network management system) * Microsoft WSUS (Windows Server Update Services) * Ivanti Security Controls * Ivanti Device and Application Control * Avecto Defendpoint DESIRABLE SKILLS/QUALIFICATIONS: * Citrix based VDI Infrastructure * Administering Licence Servers * Administering Managed Print Servers * ITIL Foundation * MCP/MCSE If you have the skills required, please "In applying for this position, you consent to your personal data being shared with the specified employer and for your details to remain with GTS for as long as is necessary to process your application. See our Privacy Notice for full information Global Technology Solutions is acting as an Employment Business in relation to this vacancy
25/04/2024
Project-based
Job Title: Infrastructure Support Engineer III Contract length: 3-months Day rate: £340 inside ir35 through umbrella Location: Edinburgh *Must be holding SC Clearance* Site hours are: 07:00 - 16:30 Mon-Thurs and 07:00 - 13:30 Fri - hours to be agreed ROLE OVERVIEW: We are looking for customer-focused and enthusiastic 3rd line infrastructure Support Engineer with a genuine interest in solving peoples IT issues to backfill our Business As Usual services while some of our key staff support a critical project. The applicant should be technically competent, possess good written and verbal communication skills and be willing to collaborate with the wider IT support teams. The 3rd line team members are expected to be specialists at solving a variety of software issues, while minimizing disruption to our users. A successful candidate will be someone who can blend first rate customer service with first rate technical skills. Previous experience resolving 2nd and 3rd line issues in an enterprise environment is essential. DETAILED JOB DESCRIPTION: * To manage a range of technologies such as Domain Central Services (Active Directory), SCCM - to include optimisation, interoperability, and availability * Hands on experience of day to day administration of Microsoft Active Directory including creation of users, security groups, GPO's and roaming profiles * Able to identify, define and resolve complex issues with Microsoft Windows and Office applications * Coach and educate the 2nd Line Engineers, in developing their skills to improve first time fix and overall team performance * Demonstrate resilience and the resourcefulness to work effectively under pressure and to tight deadlines * Ability to author documents such as reports, policies, procedures and workflows ESSENTIALS SKILLS/QUALIFICATIONS: * Active Directory * SCCM management & operation (or similar network management system) * Microsoft WSUS (Windows Server Update Services) * Ivanti Security Controls * Ivanti Device and Application Control * Avecto Defendpoint DESIRABLE SKILLS/QUALIFICATIONS: * Citrix based VDI Infrastructure * Administering Licence Servers * Administering Managed Print Servers * ITIL Foundation * MCP/MCSE If you have the skills required, please "In applying for this position, you consent to your personal data being shared with the specified employer and for your details to remain with GTS for as long as is necessary to process your application. See our Privacy Notice for full information Global Technology Solutions is acting as an Employment Business in relation to this vacancy
Technical Analyst - Citrix - Terraform - VMware - London. My Financial Services client are looking for a Technical Analyst to be rsponsible for end-to-end design, support, and improvement of Citrix environment, as well as provide strategic direction for Citrix and modern workspace environment. You will be implementing and supporting of my clients Citrix on-prem and Cloud environment, the engineering processes, and best practices to enable the infrastructure required for application hosting in public cloud. Responsibilities: Support and improve overall architecture of the Citrix environment Ownership of regular patching, risk and Pentest mitigations Assist across the technology and the business with new application deployments Ensure resilience, reliability and supportability across all areas of control Provide BAU third line technical support and fault resolution to the Service Desk and Application Support as required: Ensure checks, maintenance, domain, and data security at the highest level Provide technical and strategic guidance on any business projects requiring desktop/mobile services Proactively monitor and manage the operational health of the Citrix environment using Experience: Citrix XenDesktop, XenApp, Azure VDA and Citrix Cloud DaaS, Azure Cloud - (Must) Terraform, Azure ADO (Must) Microsoft Windows 10 and Windows Servers VMWare FSLogix Zscaler AppSense/Ivanti Modern Endpoint Management (MS InTune MDM & MAM, SCCM) DNS/DHCP/GPO PowerShell Windows 10 life cycle Management including Autopilot Identity and Access Management including AD, AAD, AAD Connect, SSO, MFA,Conditional Access, ADFS Exchange Online, Teams, or Mimecast, would be an advantage
25/04/2024
Full time
Technical Analyst - Citrix - Terraform - VMware - London. My Financial Services client are looking for a Technical Analyst to be rsponsible for end-to-end design, support, and improvement of Citrix environment, as well as provide strategic direction for Citrix and modern workspace environment. You will be implementing and supporting of my clients Citrix on-prem and Cloud environment, the engineering processes, and best practices to enable the infrastructure required for application hosting in public cloud. Responsibilities: Support and improve overall architecture of the Citrix environment Ownership of regular patching, risk and Pentest mitigations Assist across the technology and the business with new application deployments Ensure resilience, reliability and supportability across all areas of control Provide BAU third line technical support and fault resolution to the Service Desk and Application Support as required: Ensure checks, maintenance, domain, and data security at the highest level Provide technical and strategic guidance on any business projects requiring desktop/mobile services Proactively monitor and manage the operational health of the Citrix environment using Experience: Citrix XenDesktop, XenApp, Azure VDA and Citrix Cloud DaaS, Azure Cloud - (Must) Terraform, Azure ADO (Must) Microsoft Windows 10 and Windows Servers VMWare FSLogix Zscaler AppSense/Ivanti Modern Endpoint Management (MS InTune MDM & MAM, SCCM) DNS/DHCP/GPO PowerShell Windows 10 life cycle Management including Autopilot Identity and Access Management including AD, AAD, AAD Connect, SSO, MFA,Conditional Access, ADFS Exchange Online, Teams, or Mimecast, would be an advantage
Job: Security Architect Location: Reading, UK, Hybrid Job Type: Permanent Job Description We are seeking a highly skilled and experienced Security Architect to join our team who will be responsible for development of the Security Architecture that ensures the appropriate protection of all aspects of security, (people, process, electronic, data, physical) in Spring Fibre. You will be a subject matter expert and provide security guidance and recommendations to technology/business teams and contribute toSpring's security policies, standards, and guidelines related to information and Network security. This is a technical role and suitable for someone who has hands on experience in Cybersecurity. Responsibilities Help develop an Enterprise Security Architecture Framework, including patterns for identity & authentication, authorization and access control, cryptographic key and certificate management, auditing and security monitoring, data leakage prevention, privacy enhancement & protection and other standards in alignment with Enterprise Architect platforms. Establish metrics and monitoring to report the effectiveness and efficiency of the Security Architecture function. Identify, register and maintain security risks throughout their lifetimes, including agreeing treatment of risks with their owners, and reporting &escalating to Internal Audit and the CIO, when necessary. Develop, review and update security & privacy policies & standards and provide awareness guidelines, implementation and exceptions advice. Engage with owners & custodians of BAU IT systems to understand the architecture, data flow and security controls in their systems. Conduct periodic security compliance assessments and ISO 27001/2 reviews of BAU IT applications, infrastructures & ISMS. Review the security posture of potential M&A acquisition targets. Requirement Mapping long term business requirements to security architecture frameworks such as NIST, CIS etc. Experience delivering Hybrid Cloud and Internet facing applications with a strong focus on cyber security. Broad hands-on knowledge of Firewalls, intrusion detection systems, data encryption, and other industry-standard techniques and practices. Strong knowledge of IT infrastructure, IP Networking, security best practices, and automation technologies. Application security: including but not limited to: authentication, identity and access management, auditing, use of cryptography, data security, privacy enhancing technologies, web services security, OWASP, threat & vulnerability management and secure code development methodologies. Infrastructure security: including but not limited to: network security, host security, database security, device security, VPNs & SSLs, secure file transfers, security event monitoring, malware security and cyber security. Operational security: including but not limited to: incident management, change & patch management, data centre & physical security, backups, DR & BCP, outsourcing, managed services, cloud computing, asset management, cryptographic keys & certificate management, PCI DSS and DPA compliance and ISO 27001/2. Analysing network security controls, including Firewall and Router security configuration. Preferred Delivering the security review processes and frameworks, with full audit trail. Managing multiple security assessments and changing priorities, simultaneously Ensuring Security Architecture Review is built into group wide and business specific processes for acquiring and developing new technology,including developing any needed processes. Aligning business requirements to complex security architecture frameworks. Skills Required: In depth knowledge of: Firewall: Juniper/Cisco/PaloAlto. Onion Security, Splunk, Suricata, Kali. Application Security. Identity and Access Management. Data Protection. Endpoint Security. Cyber Security Operations. Experienced with Threat Modelling. Pen testing and basic incident response. Scripting languages ( python, or PowerShell/building dashboards/au-tomating common tasks) Preferred: Experience in designing systems against a zero-trust architecture. Experience with designing SOC architectures (ie SIEM, SOAR and vulnerability management solutions). Expert-level certification in either AWS or Azure, with a Security specialization. Experience in working within regulated environments, such as PCI-DSS Experience in defining secure development life cycles. Qualifications Bachelor's Degree in either Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, Math, Physics. CISSP, Certified Information Systems Security Professional, International Information Systems Security Certification Consortium (ISC2) Certification, Microsoft Azure Solutions Architect, or AWS Solutions Architect.
24/04/2024
Full time
Job: Security Architect Location: Reading, UK, Hybrid Job Type: Permanent Job Description We are seeking a highly skilled and experienced Security Architect to join our team who will be responsible for development of the Security Architecture that ensures the appropriate protection of all aspects of security, (people, process, electronic, data, physical) in Spring Fibre. You will be a subject matter expert and provide security guidance and recommendations to technology/business teams and contribute toSpring's security policies, standards, and guidelines related to information and Network security. This is a technical role and suitable for someone who has hands on experience in Cybersecurity. Responsibilities Help develop an Enterprise Security Architecture Framework, including patterns for identity & authentication, authorization and access control, cryptographic key and certificate management, auditing and security monitoring, data leakage prevention, privacy enhancement & protection and other standards in alignment with Enterprise Architect platforms. Establish metrics and monitoring to report the effectiveness and efficiency of the Security Architecture function. Identify, register and maintain security risks throughout their lifetimes, including agreeing treatment of risks with their owners, and reporting &escalating to Internal Audit and the CIO, when necessary. Develop, review and update security & privacy policies & standards and provide awareness guidelines, implementation and exceptions advice. Engage with owners & custodians of BAU IT systems to understand the architecture, data flow and security controls in their systems. Conduct periodic security compliance assessments and ISO 27001/2 reviews of BAU IT applications, infrastructures & ISMS. Review the security posture of potential M&A acquisition targets. Requirement Mapping long term business requirements to security architecture frameworks such as NIST, CIS etc. Experience delivering Hybrid Cloud and Internet facing applications with a strong focus on cyber security. Broad hands-on knowledge of Firewalls, intrusion detection systems, data encryption, and other industry-standard techniques and practices. Strong knowledge of IT infrastructure, IP Networking, security best practices, and automation technologies. Application security: including but not limited to: authentication, identity and access management, auditing, use of cryptography, data security, privacy enhancing technologies, web services security, OWASP, threat & vulnerability management and secure code development methodologies. Infrastructure security: including but not limited to: network security, host security, database security, device security, VPNs & SSLs, secure file transfers, security event monitoring, malware security and cyber security. Operational security: including but not limited to: incident management, change & patch management, data centre & physical security, backups, DR & BCP, outsourcing, managed services, cloud computing, asset management, cryptographic keys & certificate management, PCI DSS and DPA compliance and ISO 27001/2. Analysing network security controls, including Firewall and Router security configuration. Preferred Delivering the security review processes and frameworks, with full audit trail. Managing multiple security assessments and changing priorities, simultaneously Ensuring Security Architecture Review is built into group wide and business specific processes for acquiring and developing new technology,including developing any needed processes. Aligning business requirements to complex security architecture frameworks. Skills Required: In depth knowledge of: Firewall: Juniper/Cisco/PaloAlto. Onion Security, Splunk, Suricata, Kali. Application Security. Identity and Access Management. Data Protection. Endpoint Security. Cyber Security Operations. Experienced with Threat Modelling. Pen testing and basic incident response. Scripting languages ( python, or PowerShell/building dashboards/au-tomating common tasks) Preferred: Experience in designing systems against a zero-trust architecture. Experience with designing SOC architectures (ie SIEM, SOAR and vulnerability management solutions). Expert-level certification in either AWS or Azure, with a Security specialization. Experience in working within regulated environments, such as PCI-DSS Experience in defining secure development life cycles. Qualifications Bachelor's Degree in either Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, Math, Physics. CISSP, Certified Information Systems Security Professional, International Information Systems Security Certification Consortium (ISC2) Certification, Microsoft Azure Solutions Architect, or AWS Solutions Architect.
Lead IT Security Manager Permanent Birmingham - 2 Days per week on site £48,900 - £61,140 per annum My client in the Rail industry are looking for a Lead IT Security Manager to join their fast-paced Operations team on a permanent basis. The Lead IT Security Manager is responsible for is the effective management of the Security Operations pillar within the IT Security, Compliance & Identity function. This includes Security technology and Security Operations Centre management. Key focus areas for this role, the ideal candidate will have experience in each of the below; Threat & Vulnerability Management Security Operations Centre - 24/7 Outsourced Web & Content Filtering - ProofPoint, Zscaler, etc. Endpoint Security Infrastructure Security Accountabilities * Lead the Security Operations pillar, determining and delivering requirements, methods, and tools to provide value and reduce risk across proactive monitoring, incident response, threat management and vulnerability management (among other activity) . * Lead the creation and maintenance of Security Operations policy, standards procedures, and documentation (including playbooks and guidance). * Manage the application and compliance of security operations procedures, reviewing actual and potential security breaches, and ensuring their investigation. * Lead the Security Operations team's response to incidents, recommending actions and appropriate control improvements. * Monitor the external environment to gather intelligence on emerging technologies, documenting impacts, threats, and opportunities to IT. * Provide expert advice on threat intelligence activities, identifying which threat categories are most dangerous to the organization and how to defend against them. * Manage vulnerability assessment activities within company IT, providing expert advice where necessary in the review of vulnerability assessment tools and techniques. * Develop, maintain, and test Security Operations' incident management procedures, investigating escalated incidents and facilitating recovery post-incident resolution. * Lead Security Operations risk management activities, leading on the identification of risks and vulnerabilities and assessment of their impacts. * Manage and oversee the day-to-day activity of the SOC supplier who will deliver security capabilities, communicating their activity to relevant teams. * Manage the design, delivery, maintenance, and continuous improvement of the IT Security Ops capabilities in line with business needs. * Manage the Security Operations Centre (SOC) capability, ensuring effective protection, defence, and response to IT security risks. * Promote the Security, Compliance & Identity function to develop and enhance the team profile to develop enduring relationships with stakeholders and teams. * Implement a multi-year Security roadmap that provides proactive capabilities which enable business objectives. * Actively promote and embed Equality Diversity and Inclusion (EDI) in all your work, and support and comply with all organisational initiatives, policies and procedures on EDI. Skills: * Relationship Building. Ability to develop and maintain strong relationships with internal and external stakeholders. * Security Operations. Ability provide leadership for live security incidents and helping conduct robust investigations in order to identify corrective actions and see them through to completion. * Threat Intelligence. Ability to provide guidance on proactive threat identification, analysis, and mitigation. Skilled in actionable intelligence, industry sources, and general awareness of threat landscape. * Vulnerability Assessment. Ability to identify and classify security vulnerabilities in networks, systems and applications and mitigating or eliminating their impact. * Risk Management. Ability to identify IT security operations risks and the delivery of audit remediation activities. * Emerging technology monitoring. Ability to identify and assess new and emerging technologies, products, services, methods and techniques. Knowledge: * Knowledge of IT Service Frameworks, methodologies, and best practice such as ITIL v4 and Agile. * Knowledge of day-to-day activities and best practice within a SOC. * Knowledge of technical security such as Firewalls, network security groups, and access controls. Type of Experience: * Experience of leading a team through the full IT service life cycle, enhancing security posture, and evolving capabilities via continual service improvement. * Experience of leading live cyber incidents and the remediation actions. * Experience of partnering with supplier teams for managed services delivery of improvements. * Experience across the full IT security spectrum (software, Servers, infrastructure, and networks). * Experience designing and implementing secure systems, leading review where necessary of complex security issues. * Experience of enabling and informing risk-based decisions. * Experience dealing with the security implications of transformation and day-to-day product changes. * Experience working with system architectures, displaying a strong understanding of the impact of vulnerabilities on varied systems Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.
23/04/2024
Full time
Lead IT Security Manager Permanent Birmingham - 2 Days per week on site £48,900 - £61,140 per annum My client in the Rail industry are looking for a Lead IT Security Manager to join their fast-paced Operations team on a permanent basis. The Lead IT Security Manager is responsible for is the effective management of the Security Operations pillar within the IT Security, Compliance & Identity function. This includes Security technology and Security Operations Centre management. Key focus areas for this role, the ideal candidate will have experience in each of the below; Threat & Vulnerability Management Security Operations Centre - 24/7 Outsourced Web & Content Filtering - ProofPoint, Zscaler, etc. Endpoint Security Infrastructure Security Accountabilities * Lead the Security Operations pillar, determining and delivering requirements, methods, and tools to provide value and reduce risk across proactive monitoring, incident response, threat management and vulnerability management (among other activity) . * Lead the creation and maintenance of Security Operations policy, standards procedures, and documentation (including playbooks and guidance). * Manage the application and compliance of security operations procedures, reviewing actual and potential security breaches, and ensuring their investigation. * Lead the Security Operations team's response to incidents, recommending actions and appropriate control improvements. * Monitor the external environment to gather intelligence on emerging technologies, documenting impacts, threats, and opportunities to IT. * Provide expert advice on threat intelligence activities, identifying which threat categories are most dangerous to the organization and how to defend against them. * Manage vulnerability assessment activities within company IT, providing expert advice where necessary in the review of vulnerability assessment tools and techniques. * Develop, maintain, and test Security Operations' incident management procedures, investigating escalated incidents and facilitating recovery post-incident resolution. * Lead Security Operations risk management activities, leading on the identification of risks and vulnerabilities and assessment of their impacts. * Manage and oversee the day-to-day activity of the SOC supplier who will deliver security capabilities, communicating their activity to relevant teams. * Manage the design, delivery, maintenance, and continuous improvement of the IT Security Ops capabilities in line with business needs. * Manage the Security Operations Centre (SOC) capability, ensuring effective protection, defence, and response to IT security risks. * Promote the Security, Compliance & Identity function to develop and enhance the team profile to develop enduring relationships with stakeholders and teams. * Implement a multi-year Security roadmap that provides proactive capabilities which enable business objectives. * Actively promote and embed Equality Diversity and Inclusion (EDI) in all your work, and support and comply with all organisational initiatives, policies and procedures on EDI. Skills: * Relationship Building. Ability to develop and maintain strong relationships with internal and external stakeholders. * Security Operations. Ability provide leadership for live security incidents and helping conduct robust investigations in order to identify corrective actions and see them through to completion. * Threat Intelligence. Ability to provide guidance on proactive threat identification, analysis, and mitigation. Skilled in actionable intelligence, industry sources, and general awareness of threat landscape. * Vulnerability Assessment. Ability to identify and classify security vulnerabilities in networks, systems and applications and mitigating or eliminating their impact. * Risk Management. Ability to identify IT security operations risks and the delivery of audit remediation activities. * Emerging technology monitoring. Ability to identify and assess new and emerging technologies, products, services, methods and techniques. Knowledge: * Knowledge of IT Service Frameworks, methodologies, and best practice such as ITIL v4 and Agile. * Knowledge of day-to-day activities and best practice within a SOC. * Knowledge of technical security such as Firewalls, network security groups, and access controls. Type of Experience: * Experience of leading a team through the full IT service life cycle, enhancing security posture, and evolving capabilities via continual service improvement. * Experience of leading live cyber incidents and the remediation actions. * Experience of partnering with supplier teams for managed services delivery of improvements. * Experience across the full IT security spectrum (software, Servers, infrastructure, and networks). * Experience designing and implementing secure systems, leading review where necessary of complex security issues. * Experience of enabling and informing risk-based decisions. * Experience dealing with the security implications of transformation and day-to-day product changes. * Experience working with system architectures, displaying a strong understanding of the impact of vulnerabilities on varied systems Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.