Infrastructure Security Design & Implementation Analyst Modeller Lv3

Procom • Contract • Remote (Canada) • 3d ago

Infrastructure Security Design and Implementation Consultant, L3

Our client is seeking a Security Consultant to support several projects requiring enhanced security measures for both on-premises and cloud-based systems to develop security artefacts, conduct security assessments, and perform authorization activities in compliance with Government of Canada security standards.

Remote work contract running from January 12th-March 26th

Must possess a valid federal security clearance

This engagement is to ensure that all designated systems meet security requirements and obtain appropriate authorization to operate (ATO). Consultants will provide expertise in security design, assessment, and authorization processes.

Deliverables

Concept of Operations (CONOPS) – Document outlining operational scenarios and security considerations.
Statement of Sensitivity (SoS) – Defines asset sensitivity and drives control selection.
Privacy Impact Assessment (PIA) – Ensures compliance with the Privacy Act.
Security Controls and Traceability Matrix (SCTM) – Maps controls to requirements and evidence.
Vulnerability Assessment Briefings (VA) – Summarizes findings and recommendations.
Security Assessment Report (SAR) – Consolidates assessment results and risk levels.
Plan of Action and Milestones (POAM) – Details remediation steps, timelines, and responsibilities.
Authorization Decision Letter (ADL) – Provides recommendation for system authorization.
Authorization to Operate (ATO) – Formal approval for system operation
Security Assessment and Authorization Plan – Defines scope, activities, deliverables, and schedule.
Evidence Collection – Includes SoS, PIA, VA reports, and other required documentation.
Risk Analysis Documentation – Computes risk levels based on vulnerabilities, sensitivity, and threat profile.
Validated Security Assessment Report – Reviewed and approved by cybersecurity manager.
Final POAM – Updated with cost estimates, timelines, and responsible parties.
Letter of Recommendation – Suggests authorization status (full, limited, or denied).
Authorization to Operate (ATO) – Issued based on assessment and remediation status.

Mandatory Requirements

Must have a minimum of five (5) years of experience developing and implementing Identity and Access Management (IAM) systems and controls, including mapping IAM requirements to technical implementation.
Must demonstrate, using project descriptions, that the proposed resource has a minimum of five (5) years of experience implementing identity federation, with specific experience in SAML, OIDC / OAuth, and implementing federated identity capabilities in an on premise, hybrid cloud, and/or cloud implementations.