Solutions Designer L2 Contract

This resource will be working on software that assist with authenticating identity. This resource will be assisting with keeping this software up and running and general maintenance. There are 6 major components within this eco-system, with multiple software modules which are from different vendors. The ministry currently has 3 people that do this work but are also upgrading this software currently to 2020 version. We are looking to onboard resourcing to run the current version of the software so our current team can upgrade this software into the newest version and backfill the existing resourcing.

Must haves:

• Software support and design specifically with the following technologies: entrust security manager, entrust security manager proxy, entrust admin services, true path, IBM, Automated enrollment services (AES), sun microsystems (Sun IBM)
• Experience with hands on software installation and configuration
• Problem solving and troubleshooting
• Ability to install and test patches
• Teamwork is extremely important to this role – need to be able to communicate with other departments and work within our team environment
• Linux experience – expect to have 3-5 years experience in these tech skills
• ATOX DIR.X a stong asset
• PKI Eco System experience – this is typically used by large governments (OPS, FED etc) Banking, aviation, or military contracting
• Previous experience with large enterprise clients

NOTs: software support and troubleshooting, NOT looking for architects – need to have the hands on experience.

A note on Assignment Type: This position is currently listed as “Hybrid”, however, the consultant will be remote due to COVID-19 related Work From Home (WFH) direction. Once the IT cluster staff are required to return to the office, the resource under this request will be required to work onsite as well

A note on Extension/Amendment Attestation: Extension(s) only allowed using unused days/funds left on contract. No additional funds will be added beyond maximum contract value

Responsibilities: Undertakes the design of hosting technology solutions based on the client’s service specifications, standards, policies, best practices and cost models, in order to meet client application business requirement and project/initiative deliverables.

Requirements Description

Responsibilities/Assignment Deliverables

Vendor(s) will be assigned to any 8 hr shifts Monday – Sunday to perform the following

deliverable:

Deliverable details:

1. Support of the GO-PKI environments for development, User Acceptance testing and

Production, including:

1.1 Monitoring the health, performance and status of service components (e.g. technology

stack);

1.2 Starting and stopping service components;

1.3 Backing up or recovering service components (e.g. associated data or configurations);

1.4 Tuning service components;

1.5 Maintaining service components (e.g. applying patches, renewing certificates or licenses);

1.6 Triaging, analysing, and resolving incidents related to GO-PKI;

1.7 Identifying, analysing, and resolving problems related to GO-PKI – Entrust PKI Suite (e.g.

Security Manager v8.x, Security Manager Proxy, Admin Services, Automated Enrolments

Services (AES), SSL;

1.8 Assessing the impacts of changes on GO-PKI, including changes raised by clients and

service providers (e.g. ITS, CompuCom, Telus);

1.9 Documenting maintenance and support requirements and procedures.

1.10 Engage and work with product vendor if the extended support is required.

2. Provide on-call support for the GO-PKI production environments 24×7, and on-call support

for the GO-PKI non-production environments (e.g. pre-production) on a 5 x 10 basis not limited

to:

2.1 Participate in incident management as an incident coordinator, incident analyst, or tier-2/

tier-3 SME.

2.2 Participate in change management as a change coordinator, change analyst or application

SME.

2.3 Assist and provide production support to GO-PKI application on following Networking

infrastructure components and technologies : Load Balancers, Firewall, Proxy Servers,

Gateways, Routers etc.

2.4 Provide application support and expertise to application and infrastructure based on the

following technology products: Entrust PKI Suite, Sun Identity Manager (Sun IDM), LDAP Tools

(such as Atos Dir.X, Apache Dir Studio/CLI Commands), Windows Internet Information Server

(IIS), Apache HTTPD/IBM Web Server/NGINX, SQL , Oracle database 11g (and later), Solaris,

Windows, AIX and Linux Operating Systems.

3. Support clients across the OPS and BPS to integrate their applications with GO-PKI for

identity and access

management by:

3.1 Analyzing clients’ technical requirements, designing approaches/solutions;

3.2 Describing patterns related to integration approaches/solutions;

3.3 Developing processes and plans that support the application of patterns;

3.4 Constructing, testing, and deploying solutions;

3.5 Analyzing and resolving problems encountered during integration;

3.6 Developing utilities, scripts, applets, and reports to facilitate and automate the integration

experience; and

3.7 Documenting approaches/solutions.

4. Improve the support posture of the GO-PKI team by:

4.1 Developing requirements for support tools;

4.2 Evaluating and recommending tools;

4.3 Installing and configuring tools;

4.4 Developing, testing, and deploying programmatic constructs (e.g. scripts, queries, views,

reports, procedures or other); and

4.5 Documenting maintenance and support requirements and procedures.

5. Assist with implement disaster recovery solution (DR) for the future production GO-PKI

applications including definition and the documentation of processes and operational DR

procedures;

6. Define, document, configure, implement and testing of GO-PKI system management based

on standard

practices, including:

6.1 System management processes and task;

6.2 System events, events metrics, thresholds and alerts;

6.3 System monitoring and alerting;

6.4 Working with infrastructure hosting partner organization implement system management

processes and

procedures;

6.5 Document defined system management process and procedures;

7. Foster a team culture of excellence and innovation, including:

7.1 Developing or informing the development of role descriptions for the sustainment of GOPKI,

especially related to the technical support function;

7.2 Developing plans for the knowledge and skills transfer to OPS employees, including

activities or tests to

demonstrate the successful transfer of knowledge and attainment of required skills. OPS

employees includes IT Source People Placement Service;

7.3 Developing plans for the transition of sustainment functions to OPS employees; and

7.4 Transferring knowledge to OPS employees.

Experience & Skill Set

Large Application Solutions and other technologies:

10+ years experience sustaining (e.g. administration, operations, support, patching,

monitoring, starting/stopping) COTS based identity and access management systems. At

least 4 years experience must be related to implementations with over 10,000 registered

users.

10+ years experience designing, developing, deploying, and sustaining large application

implementations based on the following technology products: Entrust PKI Suite, Sun Identity

Manager (Sun IDM), LDAP Tools (such as Atos Dir.X, Apache Dir Studio/CLI Commands),

Windows Internet Information Server (IIS), Apache HTTPD/IBM Web Server/NGINX, Oracle

Web Logic, SQL, Oracle database 11g (and later), Solaris, Windows, AIX and Linux.

Experience with ITIL processes such as Service Level Management, Problem Management,

Change Management, Release Management, and Capacity Management.

10+ years experience triaging, analysing, diagnosing (a.k.a trouble-shooting), evaluating

options, and resolving application problems, especially those related to identity and access

management systems and the above technologies. Experience with decision making

processes.

Experience with Change Management and Release Management as processes supporting

the implementation of large applications.

Experience with automated testing tools, such as Team Foundation Server (TFS), Robot

Framework, GOSS, SIKULIX or Visual Studio Team Server (VSTS)

Strong interpersonal skills, including verbal and written communication and negotiation skills.

Large Identity and Access Systems:

At least 4 years experience must be related to Entrust PKI Suite (e.g. Security Manager v8.x,

Security Manager Proxy, Admin Services, Automated Enrolments Services (AES)).

Knowledge of IT security technologies particularly encryption and authentication technologies

such as PKI, PMI, and SSL.

Quality Control, Assurance, Release Management:

10+ years experience with quality control and assurance methodologies and practices as

applied to the implementation of applications with over 10,000 users.