RQ10368 - IT Enterprise Architect/Strategist - Senior

Description:

Senior IT Enterprise Architect/Strategist:

Provide leadership, strategic advice and Public Key Infrastructure (PKI) expertise to the executive and management teams regarding the following initiatives:

1. Migration of approximately 65 OPS applications integrated with the existing OPS Entrust\-based PKI service (GO\-PKI) from the TruePass solution to the new Online Certificate Status Protocol (OCSP) / X.509 solution.
   


2. Upgrade of the GO\-PKI Certificate Authority to ensure continued support by the vendor.
   


3. Upgrade of the Entrust PKI Pro solution for certificate recovery.
   


4. Upgrade and deployment of new Entrust ESP Client for the desktop to support secure single sign\-on and PKI Pro.
   


5. Proof(s)\-of\-concept, options analysis and business case to inform a possible migration from the current GO\-PKI service to a PKI Managed Service model.
   


6. Implementation of Microsoft Active Directory Certificate Services (ADCS) to provide device certificates for OPS WiFi service.
   


7. Deployment of Microsoft Active Directory Certificate Services (ADCS) Disaster Recovery Environment.
   


8. Improving PKI sustainment effectiveness to ensure reliability and reduce risk.
   


9. Knowledge transfer and documentation management.
   

Requirements

Experience and Skill Set Requirements:

Must Haves:

• Expert knowledge and 10+ years experience in Identity and Access Management technologies and services with a focus on PKI.
  


• Extensive experience leading the design, deployment and sustainment of Entrust PKI technology in large enterprise environments, including expertise and experience with multi\-factor authentication services and with the following products: Security Manager, Security Manager Proxy, TruePass, Administration Services for Entrust, IdentityGuard, and Gemalto HSM.
  


• Expertise and experience in Microsoft security products including the following: Active Directory (AD), AD Certificate Services (ADCS), AD Federation Services (ADFS).
  


• Expertise in deploying Multi Factor Authentication with PKI on a variety of technologies including: smartcards, UBS tokens, and mobile devices.
  


• Excellent analytical, problem solving and decision\-making skills.
  


• Excellent interpersonal, verbal and written communications skills, including providing strategic advice to senior leaders.
  

Nice to have:

• Experience working with the Ontario government in the I&IT organization.
  

Skill Set Requirements:

Mandatory Requirements:

• Expert knowledge and 10+ years experience in Identity and Access Management technologies and services with a focus on PKI.
  


• Extensive experience leading the design, deployment and sustainment of Entrust PKI technology in large enterprise environments, including expertise and experience with multi\-factor authentication services and with the following products: Security Manager, Security Manager Proxy, TruePass, Administration Services for Entrust, IdentityGuard, and Gemalto HSM.
  


• Expertise and experience in Microsoft security products including the following: Active Directory (AD), AD Certificate Services (ADCS), AD Federation Services (ADFS).
  


• Expertise in deploying Multi Factor Authentication with PKI on a variety of technologies including: smartcards, UBS tokens, and mobile devices.
  


• Excellent analytical, problem solving and decision\-making skills.
  


• Excellent interpersonal, verbal and written communications skills, including providing strategic advice to senior leaders.
  

Highly Desirable:

• Experience working with the Ontario government in the I&IT organization.
  


• Knowledge and experience with the policies and procedures of the Ontario government (i.e. business case development, project management and governance, stakeholder management and communication strategies).
  


• Knowledge of the GO\-PKI Certificate Policy and Certification Practice Statement.
  


• Experience with Oracle OIM for provisioning authentication credentials.
  


• Knowledge of IT security technologies particularly encryption and authentication technologies such as SSL.