Cloud Security Architect (IAM)

4 months

London - hybrid

Active SC clearance required

£800 - £950 per day inside ir35

Experience required

Oracle Network

Public Sector

Overall Architect lead on

Design and Document Cloud Guard configuration
Design and Document Security Zones setup
Design and Document Security Advisor configuration
Design and Document Web Application Firewall configuration
Design and Document Security Audit setupCompartment Security

Design and Define Compartment Security requirement
Documenting Naming conventions and Tagging Compartments
Defining the policy statement
Required rule statement identification and technical definition for new policies
Compute instance life cycle definitionBastion Security

Access control configuration definition
Node access restriction documentation
Network restriction definition and documentations
Host Security (HSM) requirement, configurations, definitions and documentationsBlock Volume Security

Access Policy definitions for user and resources
Encryption and key requirement definitions
Cloud guard detector and responder recipe definitions for block volume
Process definition and documentation of Encryption key rotation for block volumes
Incident response process definition for block volume cloud guard notificationsVirtual Machine Security

Secure network access requirement definitions
Cloud guard detector and responder recipe definitions for Compute resources
security zone (optional) requirement identification and definition for compute resources
Process definitions to Respond to problems detected in Cloud Guard
Identification and definition of compute patch requirement and processes
Documentation of VSS requirements and processes
security audit process definitionsNetwork Security

Public and Private subnet technical requirement definition
WAF, Firewall and API Gateway Security rule definition
Security zone definition
Network related IAM policy definition
IPSec VPN security configuration definitionObject Storage Security

Secure network access definition for resources
Identification and definition of Cloud Guard (optional) recipes for Object Storage
Create a security zone (optional) requirement identification and definitions
Process definitions to respond to security problems detected in Cloud Guard
Security Audit process definitionsZones Security

Define requirement for compartments and security zones
Evaluate and define new security zone policies
Define process for security zone auditTag Security

Define tag namespacesSecuring Vulnerability Scanning

Define requirement and configuration for service gateway to scan Compute instances that don't have public IP addresses.
Define process for security audit