Our Valued Public Sector Client is seeking the services of a Senior Secret Cleared Security Architect to assist in building a new Targeted Enterprise Architecture (TEA) on a large Business Transformation initiative within the Public Sector
The Business Transformation team is working on building a new targeted enterprise architecture (TEA) that will respond to the needs of employees to help them do their work as efficiently as possible.
The TEA will include many capabilities some of which are already covered by existing systems. However, the goal of the Business Transformation project is to identify what they currently have available, identify gaps and determine what the best options are currently on the market that will help the client modernize the way they work.
Must Haves :
- Extensive experience with Azure
- Significant experience with Government of Canada standards (ITSG-33, Guardrails)
- Secret Clearance
Deliverables :
- Architecture Review
- Guidance on Regulatory Compliance : Ensure that the proposed solutions are compliant with existing GC cybersecurity policies, rules, and regulations.
- Risk Assessment : Conduct a thorough risk assessment of the existing and proposed systems to identify and prioritize security risks.
- Security Control Recommendations : Offer recommendations for security controls that need to be in place, including but not limited to Role-Based Access Control (RBAC), data segregation, and encryption.
- Documentation : Help in preparing security documentation that will eventually be sent over to an assessor for evaluation.
- Stakeholder Collaboration : Work closely with other teams, including the architecture and data management teams, to ensure a holistic approach to security.
- Timeline Estimation : Provide estimates on the time required for implementing security measures, taking into account the project's different stages.
- Budget Considerations : Assist in understanding the budgetary implications of various security measures, especially in the context of the project's fiscal year.
- Ongoing Security Monitoring
- Training and Skill Transfer
- Audit and Compliance Checks