Trouvez votre prochaine offre d’emploi ou de mission freelance Single Sign-on (SSO)

Nous cherchons un ingénieur systèmes chargé de gérer, de sécuriser et de faire évoluer son infrastructure informatique centrale. À ce poste, vous devrez concilier l'excellence opérationnelle au quotidien (Run) et des projets d'optimisation architecturale à fort impact (Build). Vous serez le pilier technique de nos environnements virtualisés, de nos stratégies de sauvegarde robustes et de notre cadre moderne de gouvernance des identités. Principales responsabilités Virtualisation et systèmes centraux : Gérer et optimiser l infrastructure VMware vSphere (ESXi, vCenter, clusters HA/DRS) ainsi que la topologie de serveurs hybrides Windows/Linux. Intervenir en tant qu'expert en matière d'Active Directory, de DNS, de DHCP et de stratégies de groupe. Gestion des identités et des accès (IAM) : Assurer le déploiement, la gouvernance du cycle de vie et la sécurité de notre architecture d'identité hybride à l'aide de Microsoft Entra ID et d'Okta (y compris l'authentification unique (SSO), l'authentification multifactorielle (MFA), l'accès conditionnel, SAML et OAuth 2.0). Sauvegarde et reprise après sinistre : Concevoir, valider et maintenir des stratégies de continuité d'activité infaillibles à l'aide de Veeam Backup & Replication, en mettant l'accent sur les sauvegardes immuables et la réplication multisite. Fourniture d'applications et de postes de travail : Administrer et optimiser notre écosystème Citrix Virtual Apps and Desktops, en gérant les plateformes Netscaler, Delivery Controllers et StoreFront. Opérations et automatisation : Assurer la résolution des incidents de niveau 2/3, automatiser les workflows répétitifs à l'aide de PowerShell ou Bash, et utiliser Zabbix/Nagios pour surveiller de manière préventive l'état de santé du système. Expertise technologique Virtualisation VMware vSphere, ESXi, vCenter, conception de clusters HA et DRS. Identité et gestion des accès (IAM) Microsoft Entra ID, Okta, SAML, OAuth 2.0, OIDC, provisionnement SCIM. Protection des données Veeam Backup & Replication, sauvegardes « air-gapped » / immuables, exécution de plans de reprise après sinistre (DRP). Systèmes d'exploitation Windows Server (de 2012 à 2025), Active Directory. Compétences de base en RHEL/Ubuntu. Mise à disposition des applications Citrix Workspace (v13/v14), Netscaler, StoreFront, Delivery Controllers. Surveillance et ITSM Zabbix, Nagios, ServiceNow, et conformité aux cadres ITIL.

ContexteEntreprise du secteur bancaire, développement d'un chatbot IA centralisé à l'échelle de la banque, intégrant SharePoint comme source de données principale. Projet impliquant une équipe technique spécialisée en IA, connectivité SharePoint et qualité logicielle. MissionsConcevoir et développer un chatbot IA centralisé intégrant SharePoint comme source de données principale Garantir la qualité, la fiabilité et la couverture de tests du chatbot via une stratégie QA rigoureuse Développement Python / Go / IA Concevoir l'architecture du chatbot (orchestration, RAG, gestion du contexte, multi-turn) Développer les composants IA : ingestion, embedding, retrieval, génération (LLM on-premise ou API) Intégrer les modèles LLM avec les sources de connaissance SharePoint Optimiser les performances (latence, throughput, qualité des réponses) Gestion des prompts, templates, et évaluation des réponses (prompt engineering) Développement d'outils et services en Go (performance-critical, sidecar utilities) Connectivité SharePoint Intégration avec SharePoint Online / On-Premise via API Graph ou SharePoint REST API Authentification : OAuth2, Azure AD, certificats app-only, managed identities Crawling et indexation des documents, pages, listes, et bibliothèques SharePoint Gestion des permissions et de la sécurité au niveau des sites/documents (respect des ACLs dans le retrieval) Synchronisation et rafraîchissement incrémental du contenu SharePoint Gestion des métadonnées, types de contenu, et structures de sites complexes (multi-sites, multi-tenants) Gestion des quotas API Graph (throttling, retry, pagination) QA / Testing — Focus Principal Concevoir et implémenter la stratégie de test end-to-end du chatbot Tests unitaires (pytest, Go testing) — couverture des composants IA, connecteurs SharePoint, orchestration Tests d'intégration : SharePoint API mocking, vector store, LLM endpoints Tests de contrat API (schema validation, Pydantic AI schema enforcement) Tests de non-régression sur les réponses IA : Golden datasets et évaluation automatique des réponses Scoring de qualité (relevance, faithfulness, hallucination detection) A/B testing des prompts et des versions de modèles Tests de charge et de performance (locust / k6) — simulation multi-utilisateurs concurrents Tests de sécurité : Injection de prompts (prompt injection, jailbreak) Fuite de données (data exfiltration, cross-tenant leakage) Accès non autorisés (bypass d'ACLs SharePoint) Tests de robustesse LLM : edge cases, context overflow, model fallback, timeout handling Observabilité de la qualité via Langfuse : Tracing des chaînes RAG (retrieval → génération → réponse) Évaluation continue des réponses en production (drift detection, feedback loops) Dashboards de qualité (latence, token usage, user satisfaction, error rates) Alerting sur dégradation de qualité Mise en place de pipelines CI/CD avec gates de qualité (tests, linting, évaluation IA) Gestion des environnements de test (dev / staging / prod) avec données représentatives Architecture & Intégration Concevoir le pipeline de données : SharePoint → extraction → chunking → embedding → vector store Exposer le chatbot via API REST (FastAPI) et interface utilisateur Intégration avec les systèmes internes (SSO, logging, audit, monitoring) Gestion multi-langues (FR/EN) Stack techniqueLangages : Python 3.11+, Go IA / LLM : Pydantic AI, LangChain / LlamaIndex, vLLM, Hugging Face, OpenAI-compatible APIs Observabilité IA / QA : Langfuse (tracing, évaluation, monitoring) Vector Store : Milvus / Qdrant / pgvector SharePoint : Microsoft Graph API, SharePoint REST API, MSAL API : FastAPI, Pydantic Testing : pytest, pytest-asyncio, Go testing, locust, k6 CI/CD : GitLab CI, Tekton Observabilité infra : Prometheus, Grafana, OpenTelemetry Conteneurisation : Docker, Kubernetes / OpenShift

Role: Google Workspace SME Rate: £ PRICE IN inside IR35 Location: Knutsford Cheshire FT onsite Duration: 6 months + We are looking for an experienced Google Workspace Architect and Subject Matter Expert (SME) to support the design, development and delivery of a large-scale Google Workspace implementation for a major enterprise client. This role carries particular emphasis on business continuity: the successful candidate will have hands-on experience designing and building solutions that enable the invocation of crisis management and business continuity processes from a Microsoft 365 environment into Google Workspace, ensuring organisations can maintain communication, collaboration and operational continuity when their primary Microsoft toolset is unavailable. This is a hands-on architecture and delivery role, combining strategic solution design with deep technical SME input, working alongside delivery, security and business continuity teams to embed Google Workspace as a resilient secondary/crisis platform within a predominantly Microsoft-based enterprise estate. Key Responsibilities * Lead the architecture, design and technical delivery of Google Workspace solutions across a large-scale enterprise environment (10,000+ users), including Gmail, Drive, Meet, Chat, Calendar, Admin Console and related services. * Design and build the technical solution enabling business continuity / crisis management invocation - i.e. failover, activation and operational cutover processes that move critical communication and collaboration capability from Microsoft 365 (Teams, Outlook, SharePoint) to Google Workspace during an incident. * Define the end-to-end crisis activation workflow: triggers, identity and access provisioning, data/user onboarding, communication cascade, and rollback/deactivation procedures. * Act as the primary SME for Google Workspace within the programme, providing technical guidance, best practice and governance to delivery teams, architects and business stakeholders. * Design secure, scalable Google Workspace architectures covering identity and access management (including federation/SSO with Microsoft Entra ID / Active Directory), data security, DLP, device management and compliance. * Develop integration patterns between Google Workspace and Microsoft 365 / Azure AD to support hybrid operation and crisis interoperability. * Produce architecture artefacts: solution designs, high-level and low-level design documents, runbooks, crisis invocation playbooks and operational procedures. * Support business continuity and disaster recovery planning, working with BC/DR, security and risk teams to align the Google Workspace crisis solution with wider organisational resilience strategy. * Lead or support proof-of-concept (PoC) and pilot phases, demonstrating crisis invocation capability to business and technical stakeholders. * Provide technical leadership through implementation, migration, testing (including crisis simulation/failover testing) and hypercare phases. * Mentor and provide technical direction to junior engineers and consultants within the delivery team. * Engage directly with client stakeholders, presenting solution designs, trade-offs and recommendations at both technical and business level. Essential Experience & Skills * 10+ years of delivery experience in Google Workspace implementation, architecture or engineering, ideally within large, complex, regulated organisations (e.g. financial services or similar large-scale enterprises). * Current Google Workspace certification(s) - e.g. Google Workspace Administrator certification and/or other relevant Google Cloud/Workspace credentials. * Proven, demonstrable experience designing and delivering a business continuity / crisis management solution enabling invocation from Microsoft 365 to Google Workspace, including practical knowledge of the technical, security and operational challenges involved. * Strong hands-on expertise across core Google Workspace services: Admin Console, Gmail, Drive/Shared Drives, Meet, Chat, Calendar, Groups, Vault, and endpoint/device management. * Solid understanding of Microsoft 365 architecture (Exchange Online, Teams, SharePoint, Azure AD/Entra ID) sufficient to design credible interoperability and failover solutions between the two platforms. * Experience with identity and access management, federation and SSO across hybrid Microsoft/Google environments. * Track record of delivering enterprise-scale technology solutions for large organisations, including large user-base migrations and rollouts. * Strong understanding of business continuity planning, disaster recovery principles and crisis management frameworks. * Excellent stakeholder management, communication and documentation skills, with the ability to translate technical design into business-understandable terms. * Experience operating within formal delivery frameworks (Agile/Waterfall), producing SOWs, design authority documentation and governance artefacts as required. Desirable Experience * Experience within financial services or other highly regulated, security-conscious industries. * Familiarity with SOC/Hypercare operating models and post-go-live operational support. * Experience with scripting/automation (e.g. Google Apps Script, GAM, Google Workspace APIs) to support crisis invocation automation. * Prior consulting or systems integrator experience delivering into large client engagements. * Relevant security or architecture certifications (e.g. TOGAF, CISSP, Google Professional Cloud Architect). Please share your latest CV LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.

BeyondTrust SME (Privileged Access Management) 6 months Location: Manchester and Inverness | 5 days onsite £550 inside IR35 We are seeking two experienced BeyondTrust SMEs to support the transition and ongoing operation of a Privileged Access Management (PAM) service. The successful candidates will provide hands-on administration, support, troubleshooting, and knowledge transfer activities across the BeyondTrust platform, working closely with customer SMEs and operational teams. They will play a key role in ensuring secure management of privileged access, supporting integrations with Active Directory and Microsoft Entra ID, and assisting with the transfer of service knowledge into the run organisation. Key Responsibilities 🔷 Provide hands-on administration and support for the BeyondTrust platform, including Privileged Access Management (PAM) capabilities. 🔷 Support knowledge transfer sessions and documentation review during transition activities. 🔷 Manage and maintain privileged access policies, user access controls, and security configurations. 🔷 Work with Active Directory and Microsoft Entra ID to support authentication, authorisation, group management, and role-based access controls. 🔷 Configure and maintain integrations between BeyondTrust and identity services including SAML, MFA, and directory services. 🔷 Support troubleshooting and resolution of operational incidents, service requests, and platform issues. 🔷 Assist with onboarding and offboarding privileged users and privileged accounts. 🔷 Support policy management and Group Policy-related configurations that interact with BeyondTrust services. 🔷 Participate in hypercare activities and provide operational support during service stabilisation. 🔷 Produce and maintain technical documentation, operational procedures, and support knowledge articles. 🔷 Collaborate with infrastructure, security, and service management teams to ensure service continuity and compliance. Essential Skills & Experience 2-3+ years hands-on experience supporting and administering BeyondTrust. Good understanding of Privileged Access Management (PAM) concepts and best practices. Experience with: BeyondTrust Password Safe BeyondTrust Privileged Remote Access (PRA) BeyondTrust Endpoint Privilege Management (EPM) Strong Active Directory administration experience. Experience with Microsoft Entra ID (Azure AD). Active Directory Group Policy administration and troubleshooting. Knowledge of: SAML authentication Single Sign-On (SSO) Multi-Factor Authentication (MFA) Role-Based Access Control (RBAC) Experience supporting production services in a secure enterprise environment. Strong troubleshooting and documentation skills. Desirable Skills Experience working in financial services or highly regulated environments. Exposure to service transition, KT, and hypercare activities. Understanding of ITIL processes and operational support models. Experience working within secure or restricted-access environments. Candidate Profile The ideal candidate will be a practical, hands-on engineer who can quickly become productive within an existing BeyondTrust environment, absorb knowledge from incumbent teams, support transition activities, and provide ongoing operational expertise as the service moves into BAU. Please share your latest Cv LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.