AWS Cloud Security Engineer

Start date: Monday 3 February 2020

Expected contract length: Until 31st March 2020

Location: Richmond, Surrey

Security Clearance: SC Clearance

IR35 Status: Outside IR35

Pay Rate: £Open For Discussion

The specialist will work with the Transfer Digital Records' product team at The National Archives. The team are building a service which enables the secure transfer of digital records to The National Archives. The service offers tools for content upload, validation and transfer of ownership to the Archive.

We have completed in-house discovery and Alpha prototyping phases to determine the scope of the proposed service; identify user, business and compliance requirements for access and security; and deliver a small-scale demonstration prototype and proof of concept for the service.

We now require a specialist to review the security and assurance aspects of our proposed design, identify threats and gaps and develop a strategy for delivering and operating a securing the service as we move into a Beta delivery phase.

The specialist will work with the Transfer Digital Records' product team at The National Archives:
Team roles include: Product manager, Delivery manager, Technical architect, Data analyst, Developers (front and Back End), User experience researcher. There will be scope to engage with the Service Owner, Departmental Security Officer and IT Security Officer.
The specialist will need to engage with stakeholders across the organisation to present work, demonstrate designs and seek feedback as the work progresses.

What the specialist will work on:

• Requirements: Review and understand user, business and compliance requirements for service security
• Risk discovery & analysis: Review relevant design decisions and assessment documentation from the Alpha phase; identify potential threats, weaknesses and gaps in our proposed approach
• Risk treatment: Develop a pragmatic, appropriate and cost-effective strategy for securing the service
• Assurance: Contribute to technical assessment and assurance processes
  Implementation and testing: Work with the team implementing the approved design to ensure that the Beta product release meets our security requirements.
• Documentation: Deliver appropriate documentation of requirements, design recommendations and risk assessments to support technical review and on-going service development.

Essential Skills:

• Hold relevant, current certification (please specify) with expertise and significant practical experience of developing security strategies in an AWS cloud environment.
• Have a proven track record of risk assessing and assuring cloud based architectures for secure, content-driven services.
• Have an in depth understanding of relevant security standards, protocols and architectural approaches
• Have detailed knowledge and understanding of AWS security tools and services, open source security controls and automated security testing tools
• Have expertise in developing an outcome based approach to risk identification, management and mitigation using techniques such as risk trees and attack tree methods
• Have a good understanding of identity management and identity life cycle management with strong experience of relevant security models and technical frameworks for access management.
• SC Government Clearance (or eligible to undergo)
• Be able to deliver at pace within a fixed timeline and budget.

Nice to Have Skills:

• Have experience of working within GDS standards and best practice.
• Have knowledge and experience of designing cloud services for uploading and processing large collections of digital content.

Synergize Consulting are an equal opportunity organisation.