Freelance job Security Architect

Role: Security Architect-Rate: inside IR35Location: Hybrid 2 days a week onsite in Warwick Duration: 6 monthsJob Description: Client requires 4 solution architects to support a cyber programme for around 6 to 8 months, The projects are to be deployed in the OT space but will be developed using modern deployment tooling present in IT systems. Knowledge of modern IT tools is essential and so is understanding the requirements of the environments being modified. Further detail on each project taking client jargon away (but keeping the IT lingo that could help someone understand what we are trying to do):* OT Remote Backups:o Build and deployment of multiple hosts across the country using Red Hat. o Deployment will leverage tools such as Kickstart and Ansible for automation and Satellite for updates. o File sync solution to orchestrate recovery files across multiple locations and enable processing at central location.* ?OT Data Insights Platform:o ?Data collection and forwarding to surface data from substations using protocols such as MQTT and OPC.* OT Paw Refresh:o Centrally managed Privilege access workstation using Microsoft tooling (e.g., Azure, Intune). o Virtual machines to contain applications used to manage the assets.* ?P&C Hardened Compute Platform:o Build and deployment of hosts using Red Hat + KVM. Deployment will leverage tools such as Kickstart and Ansible for automation and Satellite for updates. o ?Virtual machines to contain applications used perform operation activities.* OT Services Network Enhancements:o Creation of a Network Management Centre.o Asset management solution.o Evaluate network improvements to enhance security and resilience.Program overview: * Workplace * OT PAW delivered semi rugged transient, integrating with substations. March 2026 lifecycle coming to an end, they would like to know how to refresh the tech, achieve CAF enhanced and develop the machinea. 560 laptops in scopeb. Not enterprise standardsc. Specific platform to used. Azure intune leveragede. Build on existing design/requirements * OT remote backup a. In the substation environmentb. Substation control environment is configured and moving smoothly - settings and set up is okc. They need to protect the asset d. Take a backup and keep within a secure drive in the substatione. Risk is damage, loss, stolen or fire so they don't have a working copy to restore the system / assetf. Need to build resilience - find a location to upload the site backup in the the serverg. Cant be put into a hybrid cloud, need to be in a grid datcentreh. Machine on substation, use own private network, own servers in the DC and data storagei. Capability to manage the host on linux, linux KVM. j. Have a server, deploy, buy hard ware and deploy onto the data storek. 261 sub stations, l. 2 DC's, 2 data storesm. OT facing - windows PC, no key board, no KVM tooln. App compresses the data, uloads into the data store, captures the infoo. When needed to restore, pings app, build in same machinep. Not automated form the system, manual process - back up from SES, file safe, engineering host and kept in separate system - adhoc and manual onlyq. No frequency, adhoc * OT Data Insights Platform:a. Air gappedb. 2nd machine is the data insights platformc. Same data store as remote backupd. Strong data architecture and solution architecturee. Primarily a data architectf. Structure, definition, hosted, aggregated * Hardening and compute platform a. Different types of machines in diff substationsb. Running a proof of concept with single type of hardwarec. Virtualised environmentd. Different vendorse. E.g.: Hitachi, GE and siemensf. Own proprietary software and systemsg. They are changing hardware to single, virtualising, software will be differenth. Data insights platform sits on the new HMI * OT Services Network Enhancements: a. Their private network, tunnelling through NGs own networkb. Building some capabilitiesLA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds.Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.