Cloud Implementation & Security Architect
Hybrid
Londonhybrid, United Kingdom
Freelance
08-01-2025
Job Specifications
We are looking for a Cloud Implementation & Security Architect to develop and maintain a portfolio of Highly Available, Business Critical network support systems & applications, in bare metal, virtualized and cloud environments.
This includes designing, building, and maintaining the security systems and infrastructure needed to protect the organization's IT environment from internal and external threats.
OutsideIR35
Hybrid
ASAP Start
Job Description
Minimum 10 years working in cloud infrastructure led projects with hands-on implementation in a large scale system deployment.
Experience in Cyber security implementations like Threat Intelligence, Identity and Access Management, and Network Security Principles & segmentation tools and technologies.
Implement and configure Microsoft Defender XDR across endpoints, identities, applications, and cloud workloads.
Develop and enforce XDR-related security policies, procedures, and standards to protect critical assets.
Develop access models to manage least privilege, just-in-time (JIT) access, and user lifecycle processes.
Perform regular vulnerability assessments to identify and address security weaknesses.
Monitor and respond to potential security breaches or incidents using Security Information and Event Management (SIEM) tools.
Integrate Microsoft Defender solutions with Security Information and Event Management tools (Elastic SIEM)
Manage incident response workflows, including triage, containment, eradication, and recovery of incidents detected by Microsoft Defender.
Implement access reviews and audit logs to monitor and validate proper access controls.
Develop and maintain a consistent and scalable systems security posture based on best practices.
Implement & Troubleshoot hybrid network solutions, such as Azure ExpressRoute and VPN Gateway, for secure on-premises and Azure connectivity.
Design and implement Single Sign-On (SSO) for applications and services using Azure AD.
Configure Azure AD Privileged Identity Management (PIM) to secure privileged accounts and reduce risks.
Monitor and manage access to privileged roles with automated workflows and auditing.
Ensure compliance with data privacy regulations (egTSA,GDPR, HIPAA) and security frameworks like ISO 27001 and NIST.
Integrate PAM solutions with IT service management (ITSM) platforms and identity management tools.
Deploy and configure Azure Key Vault to store and manage secrets, keys, and certificates securely.
Define and implement access policies to control application and user access to Key Vault resources.
Background in managing cloud-based monitoring and logging systems (Elastic, Prometheus and Grafana)
Utilize Infrastructure as Code principles to automate and streamline infrastructure deployment and management processes. Develop and maintain IAC scripts for efficient and consistent infrastructure provisioning.
Implement, administer, and support an array of Windows & based servers. Proficient in Windows & Linux server administration, ensuring the stability and security of the infrastructure.
Expertise in server TIN management including a knowledge in Server, Storage and supported hardware technologies.
Re-engineer any existing standalone solutions to be high available.
Expertise in virtualisation technologies like VMware & Hyper-V, including vSphere, NSX and vSAN.
Own & deliver systems related projects using project management methodologies.
Experience with SQL/NOSQL databases, including installation, configuration, and optimization Clusters. Perform database administration tasks, such as backups, restores, and performance tuning.
Participate in the on-call rotation for system support outside of regular business hours. Provide on-call support for out-of-hours troubleshooting of service-impacting failures.
Perform occasional night migration work for system maintenance, ensuring minimal impact on operations.
Create, support and maintain solid documentation for infrastructure and systems.
Automate repetitive tasks such as patch management, threat detection, and incident response workflows.
Collaborate with cross-functional teams to ensure seamless system integration. Provide technical leadership and guidance to junior team members.
Please email CVs to (see below) or apply here
About the Company
Franklin Fitch ist ein Personaldienstleister, der seinen Kunden ein umfassendes Dienstleistungsangebot zur Personalbeschaffung bietet. Mit dem Fokus auf zwei Kerntechnologiebereiche garantiert das Spezialistenteam von Franklin Fitch professionelles Recruitment in den folgenden Märkten: - Netzwerkinfrastruktur - Server- und Cloudinfrastruktur - Informationssicherheit - Big Data und Datenbank Wir vertreten Kandidaten sowohl für Festanstellungen als auch Vertragsarbeit, von Junior- bis Seniorlevel und von der Adm... Know more
Related Jobs
- Company Name
- Franklin Fitch
- Job Title
- Network Engineer (Night)/Nokia/PON/XGS-PON/Cisco/CCNP/Core & Access/ASR & NCS
- Job Description
- Network Engineer - (Night) We have a great opportunity for an experienced Network Engineer to join our team to help drive business growth in London. The engineer will be reporting to the Network Manager. This role is a project focused, predominantly working outside of normal business hours. The successful candidates will be expected to own their assigned project task, from scoping right through delivery working as part of a team. Outside IR35 - £480pd Hybrid - 2 days a week in London What you'll do Own, manage and deliver small to mid-level projects task from the project network manager. Take ownership of weekly splitter upgrade changes at night, work with all the key stakeholders to ensure related tasks are completed efficiently and effectively. Participate in access and CPE software upgrades based in accordance with predefined procedures and industry best practices. Troubleshoot and resolve any issues arising during the upgrade process and escalate to the relevant stakeholder as may be required. Reprovision any customer service that is affected due to fibre work at night on out Nokia PON/XGS-PON access equipment. Ensure continuous service delivery for our customers post changes. Carry out pre and post checks related to night splitter changes. Maintain accurate records of upgrade schedules, executed upgrades, and any issues encountered during the process Ensure network alerts are monitored and acknowledged accordingly. Carry out migration/maintenance tasks as required by the business. Visit the office as may be required for meetings with other team members. Skills, experience and qualifications (required) Minimum 5 years Cisco core & access network experience in an ISP environment. Proven hands-on experience working with carrier grade Cisco ASR and NCS device family. Experience with typical carrier technologies, including BGP, OSPF/ISIS and MPLS based on IOS-XR platforms. Experience working with Nokia PON equipment (preferably FX-8 ISAM & PON CPEs) and Element Manager like Nokia AMS. The ability to quickly learn new technologies, in a fast paced, constantly evolving environment. Strong network migration and implementation experience. The ability to work independently during night migration works. Strong network troubleshooting experience. Strong experience using common Network Monitoring Systems (NMS) such as SolarWinds and Zabbix. CCNP-SP, CCNA-SP & Nokia PON (related certification Please email updated CVs to: (see below) or apply here
- Company Name
- Hamilton Barnes
- Job Title
- Network Engineer - 6 Month Contract - Outside IR35
- Job Description
- Network Engineer - 6 Month Contract - Outside IR35 My client is currently seeking an experienced Cisco Network Engineer with experience in Cisco ACI. The successful candidate will be instrumental in supporting and managing our clients Cisco ACI infrastructure. This role involves both hands-on technical work and documentation, with a focus on maintaining high standards for network performance and reliability. Key Details: Location: Corsham (Onsite) Rate: £400 - £480 per day Determination: Outside IR35 Clearance: Active SC cleared Contract Duration: 6 Month Contract (Long term program) Key Responsibilities: ACI Infrastructure Support: Manage and support the existing Cisco ACI infrastructure, ensuring optimal performance and availability. Technical Documentation: Produce and maintain comprehensive technical documentation related to Cisco ACI setups and configurations. Customer Site Installations: Provide support for customer site installations, ensuring smooth implementation and integration of Cisco ACI solutions. Qualifications & Skills: MUST HAVE ACTIVE SC CLEARANCE Proven experience with Cisco ACI, including setup, management, and troubleshooting. Strong understanding of network protocols and Cisco routing and switching. Ability to produce clear and detailed technical documentation. This is an URGENT requirement, so if you are interested get in touch ASAP. Network Engineer - 6 Month Contract - Outside IR35
- Company Name
- TEKsystems
- Job Title
- Cyber Security Analyst (SOC)
- Job Description
- Job Description New contract opportunity for a Cyber Security Analyst to join our Edinburgh based client on an initial 3 month contract with the opportunity to extend or transition permanently. The role will be working a standard 9-5 day but will be 5 days per week in the Edinburgh office so candidates MUST be within a commutable distance to the office. You will be joining an established and global Security Operations Centre team to assist with L1 and L2 duties. In terms of top skills, we are looking for; Cyber/Security Infrastructure related University Degree 1+ year of Cyber Security industry experience within an enterprise level environment (500+ Users} Commercial understanding of Network Intrusion, Malware Analysis, SIEM (Splunk), Network Protocols, Security Monitoring, DDoS, Incident Response Ideally experience within a Secuirty Operations Centre Environment (SOC) If you are interested in learning more and getting a full job description, please apply within. This role will be INSIDE IR35. Location Edinburgh, UK Trading as TEKsystems. Allegis Group Limited, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at our website. To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go our website. We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice on our website for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.
- Company Name
- TEKsystems
- Job Title
- ServiceNow Platform Manager
- Job Description
- Job Title: ServiceNow Platform Manager Our client is seeking a motivated and experienced IT Service Management (ITSM) Platform Manager with a focus on IT Asset Management (ITAM). The role involves designing the firm's Common Service Data Model (CSDM) and configuration management database, managing platform requirements, and ensuring alignment with architectural strategies. The candidate will coordinate data and process management across the firm, establish a governance framework, and work closely with various organizational areas including senior management, technical engineering, risk management, and operational support. Top 3 Skills: IT Service Management (ITSM) and IT Asset Management (ITAM) Expertise : Deep knowledge and experience in ITSM platforms, particularly with ServiceNow. Experience with Incident, Problem, Request, Change, Release, Configuration (CMDB), IT Asset, Knowledge, and Reporting in ServiceNow and/or FlexeraSoft.Project/Program Management : At least 10 years of technology project/program management experience . Ability to guide development of ITSM solutions, manage budgets, host governance forums, and drive project milestones to timely execution.Collaboration and Leadership : Strong ability to collaborate with various teams and stakeholders, including senior management and technical engineering. Capable of setting direction, motivating team members, and operating as a leader in cross-functional forums. These skills are essential for successfully managing and modernizing ITSM and ITAM systems within a highly regulated financial services environment. Location Glasgow, UK Trading as TEKsystems. Allegis Group Limited, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at our website. To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go our website. We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice on our website for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.