Middleware Security Architect

Responsibilities of the Middleware Security Architect include: Define secure configuration baselines for middleware software, including but not limited to IBM WebSphere Application Server, IBM WebSphere Message Queue, IBM WebSphere Portal, IBM HTTP Server, Apache HTTP Server, Apache Tomcat, Oracle WebLogic Server, nginx Web Server, node.js JavaScript Web Server. Work with middleware technical subject matter experts to agree secure configuration baselines. Work with middleware technical subject matterexperts to define/develop/implement checks for compliance scans. Work with middleware technical subject matter experts to provide remediation guidance for IT Service Owners. Work with the Configuration Baseline Management team to ensure they receive configuration compliance data. Interact with stakeholders across the organisation to understand their security needs and expectations. Define and maintain capability strategy, supported by Enterprise Architecture, Security Architecture and Control Owners, in response to business strategies, regulator expectations, technology and practice advancement, best practice, and threat actor evolution [will overlap with Architecture]. Ensure success with delivery partners (in alignment with support functions). Maintain and prioritise a capability backlog based on objectives and value released to identify what teams work on next. Supports the prioritisation of backlogs from supporting technology andoperations/service teams. Evaluate and adopt new technologies and practices which may impact the capability's needs and/or control environment. Monitor and communicate progress of capability performance through agreed indicators and metrics. Close working with Control Owners: Oversees Control Owner activity from a technical point-of-view, e.g. accurate assessment of control defect severities. Close working with Service Owners: Understands general performance of associated services, exceptions, customer feedback and service uplift roadmaps. Close working with Technology/Platform Owners: Understands general performance of associated IT services, significant bugs, technology health, customer feedback and technology uplift roadmaps (including technical debt resolution). Minimum Skills and Qualifications Minimum 5 years in-depth experience with multiple middleware technologies from the list of IBM WebSphere Application Server, IBM WebSphere Message Queue, IBM WebSphere Portal, IBM HTTP Server, Apache HTTP Server, Apache Tomcat, Oracle WebLogic Server, nginx Web Server, node.js JavaScript Web Server. Demonstrated experience with middleware platform security. Minimum 2 years experience leading a technical team. Demonstrated understanding of and experience with Centre for Internet Security (CIS) benchmarks. Strong stakeholder management skills, with demonstrated experience of understanding and meeting the needs of multiple stakeholders. Excellent communication skills, including the ability to translate complex technical concepts into business-friendly language. Customer-centric consultancy approach. Strong analytical and problem-solving skills. Reliant and adaptive to changing situations, with a strong desire to delegate and empower the team. Desirable Skills and Qualifications CISSP certification or similar Job Title: Middleware Security Architect Location: Sheffield, UK Job Type: Contract Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at https://www.allegisgroup.com/en-gb/privacy-notices. To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to https://www.allegisgroup.com/en-gb/privacy-notices. We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at https://www.allegisgroup.com/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield. TPBN1_UKTJ