EU - Secure Data and Document Exchange Expert - Ispra-onsite

DESCRIPTION OF THE TASKS

The secure data and document exchange expert will support JRC.E.3 in the delivery of PKI services by offering technical design, drafting of technical documents, development and testing of prototypes and security monitoring tools as well as contributing to the coordination of operations.

The following tasks will be performed by external service provider:

• Technical design and maintenance of the applications and the architecture of PKI systems. On the basis of the applicable legislation, certificate and security policies, the consultant is expected to work together with the staff of DG.JRC.E.3 on the design and maintenance of the applications and the architecture of the EU CCMS, ERCA Generation 1, ERCA Generation 2 and EU Laissez-Passer PKI systems. The consultant will drafttechnical documents describing the applications and the architecture of the infrastructure and systems to support the responsible staff of JRC.E.3.

• Design, implementation and maintenance of the security modules, monitoring tools and security plans The PKI infrastructure and systems must be protected against security attacks. While some components are physically isolated, some other elements are exposed to internet users to access information, which must be public. In this context, the consultant will contribute to the design, implementation and maintenance of the necessary security modules, monitoring tools and security plans.

• Design, implementation and maintenance of repositories To support the design, implementation and maintenance of the repositories of the above-mentioned PKI systems operated by JRC.E.3.

• Support to operations of PKI services The consultant will support the JRC.E.3 staff in the planning and coordination of the operation of PKI services. This includes the participation to signing sessions with the status of “trusted actor” which requires a personal security clearance.

LEVEL OF EDUCATION

As stated in the Article 2.6.3.1. of DIGIT-TM II Service requirements, a minimum educational qualification for lot 3 is: Level of education corresponding to Level 7 of the European Qualification Framework which typically corresponds to a master degree of 5 years.

KNOWLEDGE AND SKILLS

Following skills and knowledge are required for the performance of the above listed tasks:

• Very good knowledge of application architecture, systems integration, database design and implementation.

• Good knowledge of JAVA, C++, JAVASCRIPT, XML, SQL Databases, Web Services, Operating Systems (Unix, Windows, DOS), Communications Protocols.

• Ability to perform analysis and graphical design efficiently and fast

• Ability to give business and technical presentations.

• Ability to apply high quality standards.

• Ability to cope with fast changing technologies used in software and mobile apps GUIs.

• Very good communication skills with technical and non-technical audiences.

• Analysis and problem solving skills.

• Capability to write clear and structured technical documents.

• Ability to participate in technical meetings and good communication skills Due to the particular nature of a largeinternational organisation such as the European Commission, candidates should also have the following non-technicalskills:

• Capability of integration in an international/multicultural environment, rapid self-starting capability andexperience in working in team.

• Ability to participate in multilingual meetings.

• Ability to work in multi-cultural environment, on multiple large projects.

• Excellent Team Player.

• Ability to understand, speak and write English C1 will be an advantage.

• High degree of discretion and integrity is required as the applications managed and maintained in JRC.E.3may contain personal and/or confidential data.

SPECIFIC EXPERTISE

Following specific expertise is mandatory for the performance of tasks:

• At least 5 years of specific expertise in cryptography and implementation, maintenance and operation of PKIinfrastructures and applications in the road transport and identity documents security domains (min. competencelevel.
• At least 5 years of specific expertise implementation, integration and operation of HSMs of theSafeNet/Gemalto/Thales family (min. competence level.

CERTIFICATIONS & STANDARDS

Following certificates & standards are required for the performance of tasks:
• N/A 2 The competence level will be tested during interview. In case the information about the competence levelfilled in the CV are not true, this may lead to refusal of candidate.