Trouvez votre prochaine offre d’emploi ou de mission freelance Single Sign-on (SSO)

Vous serez garant(e) du bon fonctionnement, de la sécurité et de l'évolution des environnements SAP (ECC, BW, S/4), en lien avec les équipes internes, les partenaires externes et l'infogéreur. À ce titre, vos responsabilités couvriront notamment : Encadrement du Responsable des développements Administration et sécurité des systèmes SAP : Création et maintenance des connexions RFC/HTTP avec les systèmes tiers (internes et externes). Application des notes de sécurité SAP (CVE) et correctifs sur tous les environnements SAP. Gestion des autorisations techniques (utilisateurs, consultants internes/externes). Gestion du SSO Fiori/Success Factors par SAML. Renouvellement des certificats en autonomie ou avec le concours de l'infogéreur Gestion de la validité des utilisateurs SAP. Gestion des évolutions et des mises à jour : Gestion des upgrades SAPGui : création des packages, coordination du déploiement avec le pôle Informatique Utilisateur. Coordination des montées de version et application des Support Packages (équipes d'infogérance et internes SAP) Exécution des opérations post-upgrade (SPDD, SPAU) sur l'ensemble des environnements SAP (ECC, BW et S/4). Intégration avec le pôle architecture lors des upgrades et changements d'architecture Supervision, maintenance et support : Surveillance et Suivi quotidiens de la production (incidents, dumps, jobs récurrents). Référent technique lors du copil infogérance mensuel. Assistance auprès des pôles IT fonctionnels Point d'entrée technique pour les autres services IT internes Automatisation et gestion des flux : Rédaction des expressions de besoin et implémentation de flux automatisés sur l'Ordonnanceur du groupe. Paramétrage du cryptage/décryptage des fichiers entrants/sortants. Archivage et gestion des données : Archivage des données. Détermination des durées de rétention des logs SAP et mise en place des purges avec l'infogéreur. Analyses et services techniques : Demandes d'exécution de services SAP et analyse des résultats (DVM Analysis, CQC, etc.). Pilotage du PRA SAP annuel avec le RSSI et les équipes d'infogérance.

Nous recherchons pour notre client, un expert / architecte mobilité spécialisé dans la gestion du MDM Omnissa Workspace One. Il interviendra dans le pilotage et la sécurisation de l'environnement mobile du client. Voici à la suite une explication de son rôle et des compétences attendues : Gestion du Mobile Device Management (MDM) - Workspace ONE : • Mise en place, configuration et administration de la solution Workspace ONE. • Enrôlement (enrollment) des terminaux mobiles (iOS, Android, Windows, macOS) dans la solution. • Définition et application des politiques de sécurité (chiffrement, mot de passe, verrouillage, etc.). • Gestion du cycle de vie des devices (approvisionnement, supervision, retrait). Déploiement d'applications mobiles : • Intégration et gestion des releases applicatives mobiles via Apple Developer et Google Developer dans Workspace ONE. • Intégration de stores d'entreprise (Enterprise App Store). • Gestion des applications publiques et privées, y compris les applications internes spécifiques à l'entreprise. Intégration d'entités à l'infrastructure existante : • Accompagnement de nouvelles entités (filiales, départements, etc.) dans l'intégration à l'infrastructure MDM globale. • Adaptation des configurations et politiques aux spécificités de chaque entité. • Intégration avec Active Directory, Azure AD, certificats, SSO, proxies, etc. Sécurité : • Implémentation de politiques de sécurité mobile (chiffrement, gestion des accès, effacement à distance). • Surveillance de la conformité (compliance) et réponse aux alertes de sécurité. • Intégration avec les solutions de sécurité globale. • Intégration de Workspace One avec l'infrastructure de PKI et gestion du cycle de vie des certificats pour l'authentification sécurisée des terminaux Résolution d'incidents : • Support de niveau 4 sur les problématiques liées aux devices, à Workspace ONE, à la connectivité, aux apps. • Analyse des logs, diagnostics, escalades si nécessaire vers Omnissa ou d'autres éditeurs. • Documentation des incidents et capitalisation. Build / Projets d'évolution de l'infrastructure : • Participation à la conception et à la mise en œuvre de projets d'évolution (nouveaux OS, nouvelles versions de Workspace ONE, migration de plateformes). • Études d'impact, POC, documentation, déploiement en production. • Mise en conformité avec les standards ITIL, ISO, RGPD, etc. Référence de l'offre : clttqcjv7i

Contexte Le poste s'inscrit au sein de la fonction cybersécurité Groupe / BU France, en appui direct à un Architecte Cybersécurité. Les projets couverts sont variés, multi-contextes, multi-entités, avec des environnements : • IT Corporate / IT Client • Cloud public (principalement Azure/AWS) • Solutions de sécurité groupe (Zscaler, Entra ID, WAF, etc.) • Projets applicatifs cloud-native sans lien direct avec le SI Equans Le contexte requiert une forte capacité d'adaptation, une vision transverse et une aisance dans les échanges internationaux. Description Épauler l'architecte cybersécurité dans les activités run, projet, gouvernance et conformité • Garantir la cohérence des architectures cybersécurité sur les projets • Participer à la sécurisation des flux, des applications et des usages cloud • Contribuer à la documentation, la gouvernance et la communication cyber à l'échelle de la BU France Livrables Analyse et traitement des tickets sécurité : o Analyse de flux firewall o Demandes de bypass SSL Zscaler o Raccordement applicatif à Entra ID (Service Principals) • Appui technique aux équipes IT / projets sur les sujets cybers courants Suivi et amélioration de la posture de sécurité Zscaler • Configuration et revue : o Règles ZPA BU FR o Dérogations d'usage (PC Equans Elevated) • Analyse des écarts et propositions d'amélioration Formalisation de notes d'architecture et de gouvernance cyber, notamment sur : o API Management, authentification & autorisation o Entra ID : ▪ Graph API ▪ Service Principals o Gouvernance Zscaler o Usage Analytics o SSO & MFA • Contribution à la capitalisation documentaire cyber configuration, revue et dérogations des policies WAF Azure • Analyse des risques liés aux architectures applicatives web cloud-native • Recommandations sur : o Sécurisation des flux o Hébergement o Exposition Internet o Isolation & segmentation Réponses aux sujets suivants : o Architectures applicatives o Interconnexions applicatives o Bases de données o Sécurisation des flux o Hébergement cloud / on-prem o Contraintes réglementaires et cyber Prise en compte des enjeux : o Cybersécurité o RGPD o Contraintes contractuelles o Responsabilités client / hébergeur

Contexte de la mission • Renforcement de l'équipe Infrastructure & Exploitation au sein d'un grand environnement multi-sites. • Maintien en condition opérationnelle des plateformes systèmes et des services critiques. • Participation aux projets d'évolution, de sécurisation et de modernisation du SI. Votre rôle au quotidien • Prendre en charge les incidents et demandes de niveau 2 sur les environnements systèmes. • Contribuer aux projets d'évolution (virtualisation, sécurité, infrastructures hybrides). • Participer à l'amélioration continue, à la documentation et à l'industrialisation des services. Environnement technique • Windows Server, Active Directory, Linux (RHEL, Debian), Citrix. • VMware, Hyper-V, Veeam, NetApp, PKI, solutions SSO. • PowerShell, Bash, Grafana, Prometheus, Zabbix, outils de sécurité et de supervision.

Dans le cadre de la transformation digitale d'un grand groupe, vous rejoindrez une équipe d'experts dédiée au développement de solutions innovantes autour de l'Intelligence Artificielle, de la Data et des nouvelles technologies. Vous interviendrez sur une plateforme d'IA conversationnelle destinée à plusieurs dizaines de milliers de collaborateurs, avec pour objectif d'assurer son adoption, son amélioration continue et un support utilisateur de qualité. Vos missionsEn tant que Chef de Projet SI, vous serez en charge de : Accompagner les utilisateurs dans la prise en main et l'utilisation quotidienne de la solution d'IA. Assurer le support fonctionnel et technique en traitant les incidents, anomalies et demandes d'assistance. Garantir un haut niveau de satisfaction utilisateur grâce à des réponses rapides, claires et adaptées. Identifier, qualifier et remonter les besoins métiers afin de contribuer à l'évolution du produit (ergonomie, qualité des réponses, nouvelles fonctionnalités). Promouvoir les bonnes pratiques d'utilisation de l'IA conversationnelle (prompt engineering, sécurité des données, limites des modèles). Concevoir, développer et maintenir des scénarios de tests automatisés. Participer aux campagnes de tests, recettes et validation des évolutions. Produire des indicateurs de suivi et des rapports d'activité (volumétrie, incidents récurrents, axes d'amélioration). Rédiger et maintenir la documentation fonctionnelle et les supports utilisateurs. Participer à la formation et à l'accompagnement des utilisateurs. Compétences recherchéesCompétences techniquesSolide compréhension des solutions d'IA conversationnelle de type ChatGPT. Bonne maîtrise des principes de Prompt Engineering. Expérience en support applicatif et accompagnement des utilisateurs. Capacité à reproduire, analyser et documenter des incidents. Bonne connaissance des environnements Web (SSO, navigateurs, gestion des droits, cache, performances...). Expérience des outils de tests automatisés. Connaissances en gestion de projet SI et méthodologies de tests. Qualités personnellesExcellent sens du service et orientation utilisateur. Très bonnes capacités de communication écrite et orale en français et en anglais. Esprit d'analyse, rigueur et sens de l'organisation. Capacité à gérer les priorités et plusieurs sollicitations simultanément. Aptitude à communiquer avec des interlocuteurs variés (métiers, équipes techniques, direction).

Au sein de la DSI, vous intervenez sur l'administration, l'exploitation et l'évolution des infrastructures systèmes, réseaux et cloud dans un environnement critique et multi-sites. Vos missionsAdministrer et maintenir les infrastructures réseaux (switches, routeurs, firewalls) et serveurs. Assurer le MCO des environnements virtualisés et des infrastructures Microsoft On-Premise, hybrides et Cloud. Garantir la disponibilité des applications métiers et de l'ERP. Superviser les performances, gérer les incidents complexes et assurer un support technique avancé. Participer aux projets d'évolution des infrastructures et des réseaux. Assurer la sécurité des systèmes et des données, réaliser les audits et appliquer les politiques de sécurité. Gérer les sauvegardes, les PRA/PCA et les solutions d'impression sécurisée. Documenter les architectures, procédures et actions de remédiation. Assurer une veille active sur les sujets Infrastructure, Cybersécurité et IA. Contribuer ponctuellement au support Helpdesk en cas de besoin. Compétences recherchéesExpérience confirmée en administration systèmes, réseaux et infrastructures hybrides. Maîtrise de Windows Server, Linux, VMware et/ou Hyper-V. Très bonne maîtrise des infrastructures réseaux : LAN, WAN, WLAN, VLAN, switching, routing. Connaissance des solutions Aruba WiFi/LAN appréciée. Bonne maîtrise des architectures SD-WAN, VPN, ZTNA, SASE. Connaissance des solutions Fortinet fortement appréciée. Expertise Microsoft 365 : Entra ID, Intune, MDM, SSO, Exchange Online, Teams, SharePoint. Maîtrise de PowerShell et bonnes connaissances des scripts Linux. Connaissances en cybersécurité : SOC, EDR, NIS2. Bonne compréhension des environnements web et du pilotage de prestataires. Anglais professionnel indispensable.

Définition de la prestation - Administrer les services Microsoft 365 : Exchange Online, Teams, Power BI. - Gérer les licences Microsoft 365. - Assurer la gestion des utilisateurs et des groupes. - Administration flotte mobile via Intune (IOS) Gestion des identités : - Administrer Entra ID - Synchronisation AD Connect - SSO (Single Sign One) - MFA (Muli-factor Authentification) - Mettre en œuvre les politiques d'accès conditionnel. - Administrer les groupes d'identités et les rôles. Sécurité et conformité : - Savoir déployer et administrer Microsoft Defender pour O365. - Microsoft Purview - DLP (Data lost prevention) - Sensitivity labels - Information protection (AIP) Support exploitation - Assurer le support N2 / N3 (tickets incidents, demandes de service, changements) - Diagnostiquer et résoudre les incidents complexes - Réaliser des analyses de performance et de capacité Automatisation : - Savoir développer des scripts (Powershell/Microsoft graph API) - Automatiser les tâches d'administration récurrentes

ContexteDans le cadre d'un projet stratégique de transformation d'un portail métier à forte volumétrie, nous recherchons un Lead Tech / Architecte .NET capable de reprendre un existant, de définir une architecture cible moderne et d'accompagner les équipes de développement. Le contexte technique nécessite une forte capacité d'analyse, de challenge et de prise de décision afin de faire évoluer une application vers une architecture plus modulaire. Vos missionsRéaliser un audit technique de l'application existante Définir l'architecture cible de la solution Challenger les choix techniques et proposer les meilleures pratiques Concevoir les nouveaux modules applicatifs Participer activement aux développements (profil hands-on) Encadrer techniquement les développeurs Garantir la qualité du code, les performances et la maintenabilité Concevoir et faire évoluer les API Participer aux choix d'architecture Azure et DevOps Accompagner les phases de recette et de mise en production Environnement techniqueC# .NET Angular Azure Azure DevOps Azure SQL API REST Git CI/CD Docker Architecture modulaire / Microservices Clean Architecture SOLID Design Patterns Serait un plusSensibilité IA (Azure AI, Copilot, RAG, LLM) OAuth2 / OpenID Connect / SSO Kubernetes

IT Infrastructure Operations and Security Lead This role requires excellent management of a small team in IT along with managing stakeholders and vendors. You must be hands-on technically in IT Infrastructure. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Global Software Patching and estate management via Intune Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience Software Defined Networking (Cisco, Meraki, Versa) Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Soft Skills & Mindset: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. Summary of Skills Required: The following is a summary of the key skills that the Client would like you to bring to the company. Global Enterprise level Infrastructure Management position for the last 5 years, Buy before Build mentality and demonstrable migration of Legacy VM based estates to SaaS and Azure Cloud services platforms, Global Operational team management experience (human resources, strategic delivery, operational service, audit lead for Infra, budget..) Key 3 party operational infrastructure vendor management - i.e. management of managed service partners as a team extension globally, as well as service/solution delivery partners, Migration of Legacy VM based estates to SaaS and Cloud services platforms, Legacy Infra tech to Azure knowledge/experience, Prior to the last 5 years in Enterprise Management of a global estate/user-base, a demonstrable technical infrastructure engineering level background, working on Windows Server, AD , SQL environments, Firewalls/SDWAN, and Networks (WAN &/or LAN). The Client is based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £95K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.

Administrer, exploitation, sécuriser et faire évoluer la solution Microsoft 365. Garantir la disponibilité des services, accompagner les projets de transformation digital et mettre en œuvre les bonnes pratiques de sécurité et de gouvernance. Définir la roadmap Microsoft 365 (Modern Workplace, collaboration, sécurité). Assurer une veille technologique active et force de proposition. Administration Microsoft 365 : - Administrer les services Microsoft 365 : Exchange Online, Teams, Power BI. - Gérer les licences Microsoft 365. - Assurer la gestion des utilisateurs et des groupes. - Administration flotte mobile via Intune (IOS) Gestion des identités : - Administrer Entra ID - Synchronisation AD Connect - SSO (Single Sign One) - MFA (Muli-factor Authentification) - Mettre en œuvre les politiques d'accès conditionnel. - Administrer les groupes d'identités et les rôles. Sécurité et conformité : - Savoir déployer et administrer Microsoft Defender pour O365. - Microsoft Purview - DLP (Data lost prevention) - Sensitivity labels - Information protection (AIP) Support exploitation - Assurer le support N2 / N3 (tickets incidents, demandes de service, changements) - Diagnostiquer et résoudre les incidents complexes - Réaliser des analyses de performance et de capacité Automatisation : - Savoir développer des scripts (Powershell/Microsoft graph API) - Automatiser les tâches d'administration récurrentes

Dans le cadre de la croissance de mon client, je recherche un(e) Administrateur(trice) de la Sécurité des Systèmes d'Information (ASSI) pour renforcer leur posture de sécurité, accompagner les projets et soutenir l'exploitation de leur feuille de route cybersécurité. Missions principales50% : Mise en oeuvre technique des mesures de sécurité sur l'infrastructure Cloud (Microsoft et AWS) 20% : Gestion des vulnérabilités et suivi des incidents de sécurité avec le SOC externe 15% : Accompagnement du CTO et du RSSI au quotidien (sécurisation de l'infrastructure, analyse de risques projets, collecte des indicateurs de sécurité, réponse aux questions sécurité…) 10% : Rédaction des documents d'exploitation (DEX) des actions réalisées et maintien à jour des documents d'architecture technique (DAT) 5% : Support IT (Assistance et dépannage aux utilisateurs, Administration/Sécurité des postes de travail) Compétences techniques requises+++ AWS Inspector, AWS Security Hub, AWS Shield, AWS Firewall… +++ Microsoft Defender, Microsoft Security, Microsoft Intune, Microsoft Entra ID ++ Windows et MAC OS ++ Administration réseau Connaissances théoriquesSécurité applicative (SDLC, OWASP, WAF) Sécurité des infrastructures (PKI, HSM, SSO..) Cyberdéfense (SOC, SIEM, EDR, CVE/CVSS…) Contexte normatif : ISO27001, ISO27002, DORA Technos & outils utilisésSIEM : Sekoia.io EDR : HarfangLab, Microsoft Defender Scan : OpenVAS Normatif : ISO27001/27002, ANSSI Méthodo : EBIOS RM Outils projet : ClickUp, Jira, Confluence SAST : SonarCube IAM : Bastion, Keycloak, PKI, HSM CI/CD : GitHub

ContexteEntreprise du secteur bancaire, développement d'un chatbot IA centralisé à l'échelle de la banque, intégrant SharePoint comme source de données principale. Projet impliquant une équipe technique spécialisée en IA, connectivité SharePoint et qualité logicielle. MissionsConcevoir et développer un chatbot IA centralisé intégrant SharePoint comme source de données principale Garantir la qualité, la fiabilité et la couverture de tests du chatbot via une stratégie QA rigoureuse Développement Python / Go / IA Concevoir l'architecture du chatbot (orchestration, RAG, gestion du contexte, multi-turn) Développer les composants IA : ingestion, embedding, retrieval, génération (LLM on-premise ou API) Intégrer les modèles LLM avec les sources de connaissance SharePoint Optimiser les performances (latence, throughput, qualité des réponses) Gestion des prompts, templates, et évaluation des réponses (prompt engineering) Développement d'outils et services en Go (performance-critical, sidecar utilities) Connectivité SharePoint Intégration avec SharePoint Online / On-Premise via API Graph ou SharePoint REST API Authentification : OAuth2, Azure AD, certificats app-only, managed identities Crawling et indexation des documents, pages, listes, et bibliothèques SharePoint Gestion des permissions et de la sécurité au niveau des sites/documents (respect des ACLs dans le retrieval) Synchronisation et rafraîchissement incrémental du contenu SharePoint Gestion des métadonnées, types de contenu, et structures de sites complexes (multi-sites, multi-tenants) Gestion des quotas API Graph (throttling, retry, pagination) QA / Testing — Focus Principal Concevoir et implémenter la stratégie de test end-to-end du chatbot Tests unitaires (pytest, Go testing) — couverture des composants IA, connecteurs SharePoint, orchestration Tests d'intégration : SharePoint API mocking, vector store, LLM endpoints Tests de contrat API (schema validation, Pydantic AI schema enforcement) Tests de non-régression sur les réponses IA : Golden datasets et évaluation automatique des réponses Scoring de qualité (relevance, faithfulness, hallucination detection) A/B testing des prompts et des versions de modèles Tests de charge et de performance (locust / k6) — simulation multi-utilisateurs concurrents Tests de sécurité : Injection de prompts (prompt injection, jailbreak) Fuite de données (data exfiltration, cross-tenant leakage) Accès non autorisés (bypass d'ACLs SharePoint) Tests de robustesse LLM : edge cases, context overflow, model fallback, timeout handling Observabilité de la qualité via Langfuse : Tracing des chaînes RAG (retrieval → génération → réponse) Évaluation continue des réponses en production (drift detection, feedback loops) Dashboards de qualité (latence, token usage, user satisfaction, error rates) Alerting sur dégradation de qualité Mise en place de pipelines CI/CD avec gates de qualité (tests, linting, évaluation IA) Gestion des environnements de test (dev / staging / prod) avec données représentatives Architecture & Intégration Concevoir le pipeline de données : SharePoint → extraction → chunking → embedding → vector store Exposer le chatbot via API REST (FastAPI) et interface utilisateur Intégration avec les systèmes internes (SSO, logging, audit, monitoring) Gestion multi-langues (FR/EN) Stack techniqueLangages : Python 3.11+, Go IA / LLM : Pydantic AI, LangChain / LlamaIndex, vLLM, Hugging Face, OpenAI-compatible APIs Observabilité IA / QA : Langfuse (tracing, évaluation, monitoring) Vector Store : Milvus / Qdrant / pgvector SharePoint : Microsoft Graph API, SharePoint REST API, MSAL API : FastAPI, Pydantic Testing : pytest, pytest-asyncio, Go testing, locust, k6 CI/CD : GitLab CI, Tekton Observabilité infra : Prometheus, Grafana, OpenTelemetry Conteneurisation : Docker, Kubernetes / OpenShift

Role: Google Workspace SME Rate: £ PRICE IN inside IR35 Location: Knutsford Cheshire FT onsite Duration: 6 months + We are looking for an experienced Google Workspace Architect and Subject Matter Expert (SME) to support the design, development and delivery of a large-scale Google Workspace implementation for a major enterprise client. This role carries particular emphasis on business continuity: the successful candidate will have hands-on experience designing and building solutions that enable the invocation of crisis management and business continuity processes from a Microsoft 365 environment into Google Workspace, ensuring organisations can maintain communication, collaboration and operational continuity when their primary Microsoft toolset is unavailable. This is a hands-on architecture and delivery role, combining strategic solution design with deep technical SME input, working alongside delivery, security and business continuity teams to embed Google Workspace as a resilient secondary/crisis platform within a predominantly Microsoft-based enterprise estate. Key Responsibilities * Lead the architecture, design and technical delivery of Google Workspace solutions across a large-scale enterprise environment (10,000+ users), including Gmail, Drive, Meet, Chat, Calendar, Admin Console and related services. * Design and build the technical solution enabling business continuity / crisis management invocation - i.e. failover, activation and operational cutover processes that move critical communication and collaboration capability from Microsoft 365 (Teams, Outlook, SharePoint) to Google Workspace during an incident. * Define the end-to-end crisis activation workflow: triggers, identity and access provisioning, data/user onboarding, communication cascade, and rollback/deactivation procedures. * Act as the primary SME for Google Workspace within the programme, providing technical guidance, best practice and governance to delivery teams, architects and business stakeholders. * Design secure, scalable Google Workspace architectures covering identity and access management (including federation/SSO with Microsoft Entra ID / Active Directory), data security, DLP, device management and compliance. * Develop integration patterns between Google Workspace and Microsoft 365 / Azure AD to support hybrid operation and crisis interoperability. * Produce architecture artefacts: solution designs, high-level and low-level design documents, runbooks, crisis invocation playbooks and operational procedures. * Support business continuity and disaster recovery planning, working with BC/DR, security and risk teams to align the Google Workspace crisis solution with wider organisational resilience strategy. * Lead or support proof-of-concept (PoC) and pilot phases, demonstrating crisis invocation capability to business and technical stakeholders. * Provide technical leadership through implementation, migration, testing (including crisis simulation/failover testing) and hypercare phases. * Mentor and provide technical direction to junior engineers and consultants within the delivery team. * Engage directly with client stakeholders, presenting solution designs, trade-offs and recommendations at both technical and business level. Essential Experience & Skills * 10+ years of delivery experience in Google Workspace implementation, architecture or engineering, ideally within large, complex, regulated organisations (e.g. financial services or similar large-scale enterprises). * Current Google Workspace certification(s) - e.g. Google Workspace Administrator certification and/or other relevant Google Cloud/Workspace credentials. * Proven, demonstrable experience designing and delivering a business continuity / crisis management solution enabling invocation from Microsoft 365 to Google Workspace, including practical knowledge of the technical, security and operational challenges involved. * Strong hands-on expertise across core Google Workspace services: Admin Console, Gmail, Drive/Shared Drives, Meet, Chat, Calendar, Groups, Vault, and endpoint/device management. * Solid understanding of Microsoft 365 architecture (Exchange Online, Teams, SharePoint, Azure AD/Entra ID) sufficient to design credible interoperability and failover solutions between the two platforms. * Experience with identity and access management, federation and SSO across hybrid Microsoft/Google environments. * Track record of delivering enterprise-scale technology solutions for large organisations, including large user-base migrations and rollouts. * Strong understanding of business continuity planning, disaster recovery principles and crisis management frameworks. * Excellent stakeholder management, communication and documentation skills, with the ability to translate technical design into business-understandable terms. * Experience operating within formal delivery frameworks (Agile/Waterfall), producing SOWs, design authority documentation and governance artefacts as required. Desirable Experience * Experience within financial services or other highly regulated, security-conscious industries. * Familiarity with SOC/Hypercare operating models and post-go-live operational support. * Experience with scripting/automation (e.g. Google Apps Script, GAM, Google Workspace APIs) to support crisis invocation automation. * Prior consulting or systems integrator experience delivering into large client engagements. * Relevant security or architecture certifications (e.g. TOGAF, CISSP, Google Professional Cloud Architect). Please share your latest CV LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.

Senior IT Engineer with OKTA Our Client seeks a Senior IT Engineer to support the employee population, analyze current systems and assets, recommend and implement solutions and upgrades, and provide IT related training. The ideal candidate will have extensive knowledge of network maintenance and experience managing staff. Knowledge of the Art industry is a plus. From day one, the Senior IT Engineer will have an immediate impact on the day-to-day efficiency of the IT operations, and an ongoing impact on it's overall growth. Purpose of the Role: – Lead large IT projects, including the design and deployment of new IT systems and services – Maintain essential IT operations, including operating systems, security tools, applications, servers, email systems, laptops, desktops, software, and hardware – Own projects, solutions, and key responsibilities within a larger business initiative – Handle business-critical IT tasks and systems administration – Research and evaluate emerging technologies, hardware, and software – Track and maintain hardware and software inventory Responsibilities: – Monitor performance of information technology systems to determine cost and productivity levels, and to make recommendations for improving the IT infrastructure – Help define IT infrastructure strategy, architecture, and processes – Analyze business requirements by partnering with key stakeholders across the organization to develop solutions for IT needs – Assess vendors and develop test strategies for new hardware and software – Troubleshoot hardware and software issues related to internal IT – Supervise daily operations of network and server infrastructure – Align IT infrastructure with current and future business requirements and goals – Evaluate risk, develop network recovery and backup processes – Assess and purchase new and replacement hardware – Test, troubleshoot and adjust information systems to operate effectively – Implement security of the network, data and its storage and communication systems – Ensure network components meet business needs and work together seamlessly, using the full range of capabilities, and stay informed about new features and competitive solutions – Train employees on both software and hardware, troubleshoot, and provide technical support when needed – Develop and execute disaster procedures, and maintain data backups – Manage information technology and computer systems – Identify problematic areas and implement strategic solutions in time – Preserve assets, information security and control structures – Proven working experience as an IT Manager or relevant experience – Excellent knowledge of technical management, information analysis and of computer hardware/software systems – Expertise in data center management and data governance – Hands-on experience with computer networks, network administration and network installation Qualifications and requirements: – Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field, or equivalent experience – 5–7 years experience in IT management – Experience leading and managing large IT projects and rolling out IT infrastructures across various technologies – Excellent working knowledge of computer systems, security, network and systems administration, databases and data storage systems, and phone systems – Strong critical thinking and decision-making skills – Excellent project management skills and strong ability to prioritize – Firm grasp on IT infrastructure and operations best practices – Experience across different software solutions, including: desktop operating systems (MS Windows, MacOS), server operating systems (MS Windows, Linux), cloud-based technologies (Google Workspaces, AWS, SD-WAN), SaaS solutions (Okta SSO, Dynamics365, Microsoft365), mobile (iOS, Android), backup and recovery procedures, and system performance monitoring – Experience across different hardware solutions, including: Cisco Switches/Routers, Meraki/Palo Alto Firewalls, Meraki Wireless Access Points; Cisco Unified Communications. – Expertise with implementing, configuring, and testing solutions – Proven leadership skills – Strong creative and analytical thinking – Professional certifications preferred (i.e. A+, Network+, CCNA, MCP) The position is based in Central London. The salary is competitive and will be circa £45K - £60K. Please send your CV to us in Word format along with your salary and availability.

IT Operations Platforms and Security Lead In summary the Client is looking to recruit an all-round individual with expert knowledge and hands-on experience of IT Infrastructure coupled with Security, Compliance & Risk Management You must have upwards of 10 years hands-on expertise in IT Infrastructure combined with Security and Risk – ideally from within the banking or insurance sector. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third-party vendors to deliver a high-quality Global IT services. Working in line with the Architecture defined IT principle of a "buy before build" environment, the individual will need to ensure that outsourced and cloud-based services are robust, cost-effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity of the estate, current transformation activities and team size, the role requires the functional capability and proficiency to technically augment the team capabilities (when required) and have a detailed knowledge of technical IT support roles/services as a requirement, across multiple technical areas. Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Global Software Patching and estate management via Intune Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience Software Defined Networking (Cisco, Meraki, Versa) Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Skills & Mindset: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. The Client is a financial organisation based in the City of London. This is a hybrid position with 3 days in the office. Must have a Bachelor's degree in IT or similar. The salary for this role will be in the range £85K - £95K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.

IT Operations Platforms and Security Lead This role requires excellent management of a small team in IT along with managing stakeholders and vendors. You must be hands-on technically in IT Infrastructure. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third-party vendors to deliver a high-quality Global IT services. Working in line with the Architecture defined IT principle of a "buy before build" environment, the individual will need to ensure that outsourced and cloud-based services are robust, cost-effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Global Software Patching and estate management via Intune Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience Software Defined Networking (Cisco, Meraki, Versa) Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Soft Skills & Mindset: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. Summary of Skills Required: Global Enterprise level Infrastructure Management position for the last 5 years, Global team management (human resources, strategic delivery, operational service, audit lead for Infra, budget..) Key - 3 party operational infrastructure vendor management - i.e management of managed service partners, Migration of Legacy VM based estates to SaaS and Cloud services platforms, Legacy tech to Azure knowledge/experience, Prior to the last 5 years, a technical infrastructure engineering level background, working on Windows Server, AD , SQL environments, Firewalls/SDWAN, and Networks (WAN &/or LAN). The Client is based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £100K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.