RQ10357 - Identity Access Management Consultant - Senior

Description:

• Support of the GO\-PKI environments for development, User Acceptance testing and Production, including:
  

• Upgrade Entrust CA from obsolete state v8.2.40 to latest Entrust CA v10 so it can migrate to Entrust Managed Cloud Services as phase 2.
  


• Implementation of disaster recovery sites for both Certificate Authority servers i.e. Entrust and ADCS CA.
  


• Configure Hardware Security Modules (HSM) devices
  


• Update Atos DirX to Oracle Unified Directory (OUD) which brings cost savings of ~$350,000 on software licenses.
  


• Run proof of concepts for Entrust Managed Cloud Services. 
  


• Monitoring the health, performance and status of service components (e.g., technology stack).
  


• Starting and stopping service components.
  


• Backing up or recovering service components (e.g., associated data or configurations).
  


• Tuning service components.
  


• Maintaining service components (e.g., applying patches, renewing certificates or licenses).
  


• Triaging, analysing, and resolving incidents related to GO\-PKI.
  


• Identifying, analysing, and resolving problems related to GO\-PKI \- Entrust PKI Suite (e.g., Security Manager v8.x, Security Manager Proxy, Admin Services, Automated Enrolments Services (AES), SSL.
  


• Assessing the impacts of changes on GO\-PKI, including changes raised by clients and service providers (e.g., ITS, ONX, Telus).
  


• Documenting maintenance and support requirements and procedures.
  


• Engage and work with product vendor if the extended support is required.
  

• Provide on\-call support for the GO\-PKI production environments 24x7, and on\-call support for the GO\-PKI non\-production environments (e.g., pre\-production) on a 5 x 10 basis not limited to:
  

• Participate in incident management as an incident coordinator, incident analyst, or tier\-2/tier\-3 SME.
  


• Participate in change management as a change coordinator, change analyst or application SME.
  


• Assist and provide production support to GO\-PKI application on following Networking infrastructure components and technologies: Load Balancers, Firewall, Proxy Servers, Gateways, Routers etc.
  


• Provide application support and expertise to application and infrastructure based on the following technology products: Entrust PKI Suite, Microsoft ADCS (Active Directory Certificate Service), LDAP Tools (such as Atos Dir.X, Apache Dir Studio/CLI Commands), Windows Internet Information Server (IIS), Apache HTTPD/IBM Web Server/NGINX, SQL, Oracle database 11g (and later), Solaris, Windows, AIX and Linux Operating Systems.
  

• Support clients across the OPS and BPS to integrate their applications with GO\-PKI for identity and access management by:
  

• Analyzing clients’ technical requirements, designing approaches/solutions.
  


• Describing patterns related to integration approaches/solutions.
  


• Developing processes and plans that support the application of patterns.
  


• Constructing, testing, and deploying solutions.
  


• Analyzing and resolving problems encountered during integration.
  


• Developing utilities, scripts, applets, and reports to facilitate and automate the integration experience; and
  


• Documenting approaches/solutions.
  

• Improve the support posture of the GO\-PKI team by:
  

• Developing requirements for support tools.
  


• Evaluating and recommending tools.
  


• Installing and configuring tools.
  


• Developing, testing, and deploying programmatic constructs (e.g., scripts, queries, views, reports, procedures or other); and
  


• Documenting maintenance and support requirements and procedures.
  

• Assist with implement disaster recovery solution (DR) for the future production GO\-PKI applications including definition and the documentation of processes and operational DR procedures.
  


• Define, document, configure, implement and testing of GO\-PKI system management based on standard practices, including:
  

• System management processes and task.
  


• System events, events metrics, thresholds and alerts.
  


• System monitoring and alerting.
  


• Working with infrastructure hosting partner organization implement system management processes and procedures.
  


• Document defined system management process and procedures.
  

• Foster a team culture of excellence and innovation, including:
  

• Developing or informing the development of role descriptions for the sustainment of GO\-PKI, especially related to the technical support function.
  


• Developing plans for the knowledge and skills transfer to OPS employees, including activities or tests to demonstrate the successful transfer of knowledge and attainment of required skills. OPS employees include IT Source Professional Services Staff resources.
  


• Developing plans for the transition of sustainment functions to OPS employees; and
  


• Transferring knowledge to OPS employees.
  

Requirements

Experience and Skill Set Requirements:

Must Have:

• 10+ years experience sustaining (e.g., administration, operations, support, patching, monitoring, starting/stopping) COTS based identity and access management systems. At least 4 years experience must be related to implementations with over 10,000 registered users.
  


• 10+ years experience designing, developing, deploying, and sustaining large application implementations based on the following technology products: Entrust PKI Suite, Microsoft ADCS (Active Directory Certificate Service), LDAP Tools (such as Atos Dir.X, Apache Dir Studio/CLI Commands), Windows Internet Information Server (IIS), Apache HTTPD/IBM Web Server/NGINX, Oracle Web Logic, SQL, Oracle database 11g (and later), Solaris, Windows, AIX and Linux.
  


• At least 4 years experience must be related to Entrust PKI Suite (e.g., Security Manager v8.x, Security Manager Proxy, Admin Services, Automated Enrolments Services (AES)).
  

Skill Set Requirements:

 Large application solutions and other technologies:

• 10+ years experience sustaining (e.g., administration, operations, support, patching, monitoring, starting/stopping) COTS based identity and access management systems. At least 4 years experience must be related to implementations with over 10,000 registered users.
  


• 10+ years experience designing, developing, deploying, and sustaining large application implementations based on the following technology products: Entrust PKI Suite, Microsoft ADCS (Active Directory Certificate Service), LDAP Tools (such as Atos Dir.X, Apache Dir Studio/CLI Commands), Windows Internet Information Server (IIS), Apache HTTPD/IBM Web Server/NGINX, Oracle Web Logic, SQL, Oracle database 11g (and later), Solaris, Windows, AIX and Linux.
  


• Experience with ITIL processes such as Service Level Management, Problem Management, Change Management, Release Management, and Capacity Management.
  


• 10+ years experience triaging, analyzing, diagnosing (i.e., troubleshooting), evaluating options, and resolving application problems, especially those related to identity and access management systems and the above technologies. Experience with decision making processes.
  


• Experience with Change Management and Release Management as processes supporting the implementation of large applications.
  


• Experience with automated testing tools, such as Team Foundation Server (TFS), Robot Framework, GOSS, SIKULIX or Visual Studio Team Server (VSTS)
  


• Strong interpersonal skills, including verbal and written communication and negotiation skills.
  

Large Identity and Access Systems:

• At least 4 years experience must be related to Entrust PKI Suite (e.g., Security Manager v8.x, Security Manager Proxy, Admin Services, Automated Enrolments Services (AES)).
  


• Knowledge of IT security technologies particularly encryption and authentication technologies such as PKI, PMI, and SSL.
  

Quality Control, Assurance, Release Management:

• 10+ years experience with quality control and assurance methodologies and practices as applied to the implementation of applications with over 10,000 Demonstrated experience in acting as a central point of contact for all incidents and problems in the day\-to\-day.