Description
Responsibilities:
The architect will be working on the security aspects of the overall Azure cloud Architecture & Design. Both work packages, architecture and design will be delivered by June 30th 2017, except for WP1.1 WS3 and WP1.2 WS2.
The Cloud Security architect will address, workout and integrate at least following topics into the overall architecture and detailed design and assure a coherent architecture and design of the solution.
- Security
- Develop an approved coherent cybersecurity architecture and design for the entire cloud solution, that can be re-used as a building block for future implementations.
- Motivated network security architecture with security groups and network Firewall appliances
- Detailed Network security architecture & design
- Detailed design for the Firewall context for each zone
- Detailed design and configuration for management and stepping stone solutions
- Emergency access procedures using Azure RAS
- Infrastructure and application security
- Architecture and design of Load balancer, reverse Proxy, ADC and WAF for accessing the web Front End
- Take into account that authentication of the services must be compatible with Trustbuilder (IDP) federation concept. (SAML/Oauth)
- Architecture and design for a centralised log consolidation for operational and audit/security purpose.
- Standard solution for privileged users
- Ensure solution is compliant with current identity requirements (Azure AAD, local identities and on-premise IDP (SAML, Oauth)
- Align and integrate the security architecture & design in the overall architecture and design
Technical skills:
Providing technical leadership and expert advice for developing a cloud architecture and design for a high performant and scalable web Front End solution in the public Cloud (Azure) based on SiteCore CMS where Back End webservices are offered on-premise.
Providing technical leadership and expert advice for developing a cloud CyberSecurity architecture and design for a high performant and scalable web Front End solution in the public Cloud (Azure) based on SiteCore CMS where Back End webservices are offered on-premise.
- Articulate and present design/architectural decisions to leadership
- Cloud Architecture experience in Azure
- Proven experience with webhosting solution deployment in Azure
- Proven knowledge network and application security in the Azure cloud including, anti-DDOS, WAF, SG's, Virtual Network appliances, governance and tooling,
Tenant security, roles:
- Demonstrated work history with cloud architecture, integration & implementations with a primary focus on security
- Understanding of industry best practices and patterns for cloud security
- MCSD: Azure Solutions Architect
- MVP is an asset