Trouvez votre prochaine offre d’emploi ou de mission freelance Firewall

Notre client dans le secteur Retail recherche un/une Ingénieur(e) DevOps senior H/F Description de la mission : Contexte Au sein d'une équipe d'opérations IT, la mission vise à renforcer rapidement les effectifs pour sécuriser et faire évoluer les environnements cloud. Mission L'Ingénieur(e) DevOps senior garantit la sécurité, la conformité et la scalabilité des environnements cloud en se spécialisant dans l'Infrastructure as Code (IaC), la gouvernance des identités et des accès sur Azure et la gestion du cycle de vie des certificats. Le rôle combine l'ingénierie d'infrastructure, l'automatisation et le durcissement sécuritaire des environnements de production. Principales responsabilités Concevoir, développer et maintenir des modules et templates IaC avec Terraform Cloud pour industrialiser le provisionnement des environnements cloud. Standardiser et rendre réutilisable le code d'infrastructure à l'aide de registres de modules centralisés et de pipelines de validation automatisés GitLab. Gérer l'état Terraform (Terraform State) et optimiser les architectures selon les principes du Well-Architected Framework : fiabilité, performance, sécurité et optimisation des coûts. Administrer et structurer la hiérarchie Azure : Management Groups, Subscriptions et Resource Groups. Définir, implémenter et auditer la gouvernance des accès via Azure RBAC, les rôles personnalisés et le principe du moindre privilège. Configurer et maintenir des Azure Policies et des initiatives de conformité pour détecter les dérives et bloquer le déploiement de ressources non conformes. Gérer les Managed Identities et Service Principals et leur intégration sécurisée dans les architectures cloud. Piloter la gestion de bout en bout des certificats SSL/TLS, des certificats de chiffrement et des autorités de certification PKI internes et externes. Automatiser le provisionnement, le renouvellement et le déploiement des certificats, notamment avec Azure Key Vault, cert-manager ou des intégrations similaires, afin d'éviter les interruptions de service liées à leur expiration. Suivre et auditer la conformité des certificats (algorithmes de chiffrement, durées de validité et protocoles supportés) et traiter les incidents associés. Administrer les composants fondamentaux des environnements Microsoft Azure : réseau, stockage, compute et pare-feu. Contribuer au suivi des coûts cloud (FinOps) et identifier les optimisations possibles de l'infrastructure provisionnée. Mettre en place la supervision de l'infrastructure cloud et des services de sécurité à l'aide d'Azure Monitor, Log Analytics et Defender for Cloud. Traiter les incidents de niveau 2/3 liés au provisionnement IaC, aux blocages d'accès RBAC ou aux défaillances de certificats. Rédiger et maintenir la documentation technique d'architecture, les runbooks de gestion des certificats et les politiques de gouvernance. Environnement technique Cloud : Microsoft Azure, Management Groups, Subscriptions, Resource Groups Infrastructure as Code et automatisation : Terraform Cloud, Terraform State, GitLab, Bash, PowerShell, Python Gouvernance et sécurité : Azure RBAC, Custom Roles, Azure Policy, Managed Identities, Service Principals, Defender for Cloud, Well-Architected Framework, DevSecOps, hardening Certificats et PKI : SSL/TLS, PKI, Azure Key Vault, cert-manager, Let's Encrypt, DigiCert Réseau : VNet, Subnets, NSG, UDR, Azure Firewall, Application Gateway Supervision et optimisation : Azure Monitor, Log Analytics, FinOps Livrables attendus Modules et templates IaC standardisés et réutilisables, accompagnés de pipelines de validation automatisés. Environnements cloud provisionnés, gouvernés et sécurisés, avec gestion des accès et détection des dérives de conformité. Provisionnement, renouvellement et déploiement automatisés des certificats. Documentation technique d'architecture, runbooks de gestion des certificats et politiques de gouvernance maintenus à jour. Profil recherché Expérience Profil DevOps senior avec une expérience solide en gestion des certificats SSL/TLS, des protocoles cryptographiques et de leur automatisation. Compétences techniques Maîtrise approfondie d'Azure, de ses concepts de gouvernance et de son modèle de sécurité. Maîtrise avancée d'Azure RBAC, des rôles personnalisés, des Azure Policies et du durcissement cloud. Excellente maîtrise de Terraform, de la gestion des états distants et des pipelines IaC. Maîtrise des scripts d'automatisation Bash, PowerShell ou Python. Connaissance des réseaux cloud et sensibilité aux pratiques DevSecOps et à la conformité réglementaire. Compétences / Qualités indispensables : Microsoft Azure et gouvernance cloud, Terraform et Infrastructure as Code, Azure RBAC, Azure Policy et sécurité cloud, Gestion et automatisation des certificats SSL/TLS et PKI, Automatisation et pipelines GitLab Compétences / Qualités qui seraient un + : /Informations concernant le télétravail : Oui — 2 jours/semaine

Security Analyst Our Client is recognised brand in London. They are looking to recruit a Security Analyst with at least 5 to 7 years proven track record as a Security Analyst. Main Accountabilities Technical leadership for all the Clients security solutions, including all the 3rd party managed services Maintain the overall security of Company network, systems, and data Monitor security access and manage IDS/IPS configurations Establishing and implementing security 'best-practice' standards as well as departmental policies and procedures Responsible for Security scanning and the efficient remediation of vulnerabilities Responsible for analysing all security incidents to determine root cause Determine, recommend, and implement upgrade security measures and controls Delivery security responses for customer and client compliance requirements Developing and managing security plans with vendors Audit activities of administrators and conduct Security awareness training Must have: Bachelor's Degree in Computer Science/Information Technology or equivalent experience Demonstrable skills and capability in Security leadership and 3rd party management experience CISSP certification preferred. Compliance knowledge required in ISO27001, PCI and GDPR. Possibly a certified ethical hacker Knowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA, AV, IDS/IPS and MDM solutions Understanding of common frameworks, such as ITIL or LEAN is preferred Good exposure of user environment management, including desktops/laptops, profile management, access control methodologies Must be very proactive in understanding and staying up to date with current security technologies and industry technology trends The Client is based in Paddington London. The salary for this role is in the range £65K - £75K plus benefits. Do send your CV to us in Word format along with your salary and availability.

Notre client dans le secteur Agroalimentaire recherche un/une Devsecops GCP H/F Description de la mission : Notre client cherche un freelance devsecops GCP pour compléter son équipe. Les tâches sont les suivantes : Intervenir sur un environnement GCP et contribuer à la sécurisation des infrastructures Cloud. Concevoir, implémenter et maintenir les chaînes CI/CD avec GitHub, Jenkins et Artifactory. Réaliser et industrialiser les solutions DevSecOps : automatisation, contrôles de sécurité et déploiements. Intégrer la sécurité au sein des processus de développement et de livraison. Identifier les vulnérabilités, proposer des solutions de remédiation et assurer leur mise en œuvre. Challenger les choix techniques et les architectures proposés par les experts des autres équipes. Collaborer avec les équipes de développement, infrastructure, Cloud et sécurité. Participer activement à l'intégration au sein de l'équipe et au partage des bonnes pratiques. Apporter une expertise Senior sur les problématiques techniques et contribuer à l'amélioration continue des pratiques DevSecOps. Stack TEchnique : Infrastructure as Code (IaC) : GCP (Compute Engine, Réseau, Stockage). (Terraform, Packer, Cloud Init) Configuration Management: => Création d'images (Golden Images) et configuration post-déploiement automatisée des serveurs Linux et Windows (Ansible, Ansible AWX, PowerShell, Bash, Python) CI/CD & Automatisation: Conception et maintenance de pipelines pour l'intégration, le test et le déploiement continu des infrastructures et des applications.(GitHub Actions, Jenkins, Git, Python) Cloud Computing (GCP): => Maintien en condition opérationnelle (MCO) de l'IaaS, incluant l'orchestration serverless et la gestion IAM/sécurité.(GCP (Cloud Functions, Pub/Sub, GKE, IAM, Landing Zonz) Orchestration & Virtualisation: => Déploiement et administration d'applications conteneurisées et gestion des environnements virtualisés sur site. (GKE (Kubernetes), Hyper-V, VMware, GCVE) Sécurité & Hybride : =>Mise en œuvre et administration des règles de sécurité réseau critiques pour la connectivité inter-environnements. (GCP Firewall Rules, Palo Alto Networks, IAM, Active Directory) Gestion du Stockage: => Administration et sécurisation des solutions de stockage File/Block complexes : NetApp Cloud Volumes (GCNV), Filestore et infrastructures SAN sur site. (GCNV (NetApp), Filestore, SAN, Hyper-V) Compétences / Qualités indispensables : Devsecops environnement Devops Compétences / Qualités qui seraient un + : Jenkins, Artifactory Informations concernant le télétravail : Oui — 2 jours/semaine

Senior IT Infrastructure & Systems Lead Our Client a bank, in Central London are looking for an experienced IT Infrastructure professional who is ideally looking for their next challenge in a dynamic and regulated financial services environment. We are seeking a highly skilled Senior IT Infrastructure Officer to lead the management, security, and continuous improvement of our enterprise IT infrastructure. The Senior IT Infrastructure Officer will be playing a key role in ensuring the availability, resilience, and performance of critical systems while supporting technologies across servers, networks, cloud services, cybersecurity, and business-critical financial applications. The candidate must have strong technical expertise in Windows/Linux, VMware, Microsoft 365, networking, cybersecurity, and infrastructure management who also enjoys solving complex challenges and driving operational excellence. Must have 7 years' experience in enterprise infrastructure, ideally within banking or financial services, and be passionate about delivering secure, reliable IT services.. The role will be Monday to Friday, 9:30am to 5:30pm and reporting into the Head of IT & Data. Due to the nature of the role, the individual is expected to work in our offices, 5 days per week, during their probationary period This role is totally hands-on. Role Description The Senior IT Infrastructure & Systems Lead is a full-time hybrid role based in London, with flexibility for some work-from-home arrangements. This role is responsible for overseeing the day-to-day operation, maintenance, and improvement of the company's IT infrastructure, including networks, servers, and core systems. The person in this role will lead and mentor technical staff, manage system performance and availability, and coordinate responses to incidents and service requests. Typical tasks include monitoring network and system health, implementing security measures, resolving complex technical issues, planning upgrades, and collaborating with stakeholders to align technology solutions with business needs. The role also involves vendor management, documentation of infrastructure and procedures, and contributing to IT strategy and roadmap decisions. Qualifications Candidates should possess strong skills in Network Administration and Information Technology for managing and optimizing infrastructure and systems. Candidates should possess solid Technical Support and Troubleshooting skills to diagnose, resolve, and prevent complex IT issues. Candidates should possess expertise in Network Security to implement, monitor, and improve security controls and practices. Extensive experience in leading IT infrastructure projects, including planning, implementation, and migration activities. Proven ability to manage and mentor IT teams, with strong communication and stakeholder management skills. Experience with server and cloud technologies, virtualization, backup and recovery, and IT monitoring tools. Relevant professional certifications (e.g., CompTIA Network+, CCNA, MCSE, or similar) are beneficial. Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience. Infrastructure & Systems Management · Administer, maintain, and optimize Windows and Linux server environments. · Manage VMware virtualized infrastructure (vSphere 8 and above). · Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. · Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. · Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). · Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). · Manage patching processes using ManageEngine Patch Manager Plus. · Support Microsoft 365 services and related cloud technologies. · In depth understanding of Cyber security · Monitor system performance, capacity, availability, and infrastructure health. · Ensure compliance with IT governance, security policies, and operational standards. End-User Computing & Branch Support · Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. · Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. · Manage OS deployment, imaging, image creation, maintenance, and software packaging. · Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. · Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. · Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems Support · Support and administer business-critical applications, including: · Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP · Support enterprise file synchronization and replication solutions (e.g., Syncovery, other SFTP). Networking • Configure and support Cisco switches and routers. • Administer FortiGate firewall environments. • Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management · Support vulnerability management using tools such as Tenable. · Manage security monitoring and log analysis tools (e.g., Splunk). · Perform SSL/TLS certificate lifecycle management using OpenSSL. · Create and manage CSRs, certificate chains, and private keys. · Ensure adherence to cybersecurity policies, standards, and regulatory requirements. · Support physical access control systems (e.g., Paxton) Operating Systems · Windows 11 · Windows Server 2019/2022 (or equivalent enterprise environments) · Red Hat Linux Infrastructure & Virtualization · VMware vSphere / vCenter (v8.0.3 and above) · Veeam Backup & Replication · Veeam ONE, VRO · Microsoft Office 365 · ManageEngine Patch Manager Plus · SAAS solutions · SQL Server Security · Symantec Endpoint Protection (SEP) · Symantec Endpoint Encryption (SEE) · SentinelOne – EDR/ XDR · Endpoint DLP solutions · Firewall administration · Vulnerability management tools (e.g., Tenable) · SIEM tools (e.g., Splunk) Networking · Cisco Switches and Routers · FortiGate Firewalls · LAN/WAN networking and routing Hardware & Storage · Dell PowerEdge Servers · Dell PowerVault SAN Storage Education Bachelor or Master's degree or professional qualification in relevant discipline (IT/Information Systems/Computer Science/Technology/Programming/Information Science/System Engineering/Computing) The role is based in Central London and initially will be be 5 days per week in the office. This is a 12 month FTC position. The salary for the role will be circa £70K - £75K. Do send your CV to us in Word format along with your salary and availability.