Authentication&Trust Platform Support SSH Key Management

Job description

Radbroke. Barclays Technology Campus. Where the best talent in the world can build careers full of scope, variety and reward, by creating the technical solutions that meet today's demands, answer tomorrow's questions and redefine the future of finance.

Information Integrity and Protection (IIP) team sits within the Cyber Security Control Centre (CSCC) tower and provides Cryptographic services, including Secure Key Management, Application Cryptography, Strong Authentication, and PKI & Certificate services to Barclays Group.

Cryptography services protect the integrity and confidentiality of key data within the firm, protecting £500bn of transactions daily. IIP securely manages the cryptographic keys, digital certificates, hardware security modules and complex cryptography services that underpin the majority of Barclays IT processes, globally.

Consequences of operational failures in these services and operations could lead to regulatory sanction, high profile fraud, blackmail or extended loss of business critical IT processing.

The IIP team is made up of 5 main areas:
· Authentication & Trust Services: Responsible for Service Ownership, change and maintenance across key platforms servicing the Banks' Customer Authentication, Certificate and PKI estate and SSH Key Management.
· IIP Service Management: Responsible for all communications regarding IIP services and scoping IIP services needed to meet business and technical requirements.
· IIP Service Delivery: Responsible for the running and operations of IIP services as well as implementation of IIP services needed to meet business and technical requirements.
· IIP Application Cryptography: Responsible for providing cryptography as a service via the Barclays Cryptography Application Gateway (BCAG).
· IIP Operational Rigour: Responsible for ensuring that operation and design of all IIP services meet regulatory and audit requirements and corporate standards as well as governance around cryptography and content analysis across the bank.

Continued high growth in demand for secure, scalable cryptographic functionality across all Barclays globally, and fast-pace of innovation has resulted in the need to grow the capabilities of this vital core security team.

Role Purpose


In 2016, a new GIS offering was established to bring SSH keys under management and control across the Barclays Group. This new role will join the existing team to help deploy and then manage the strategic toolset as part of a continued operational function.

The role will also contribute to the strategy and execution of those transformation activities around the groups' authentication and trust services in order to support the next generation of IT initiatives, including Cloud computing and drivers for ever greater levels of automation.

Key Accountabilities


To assist in the continuing build, integration and on-going support of the Barclays SSH Key Management tool service offerings internally to the Bank. In addition the role may be exposed to one or more of the following areas:

· SSH Key Management platforms.
· Digital Certificate Management tools.
· Implementation & maintenance of Authentication solutions.
· Service related documentation creation and maintenance.
· Consultancy both within ATS, IIP and the wider Barclays estate.
· Awareness/training for end users.
· Day to day operational support for current and future platforms delivered into this area.

Person Specification

Qualifications
· Degree level certificate in a Computer Science or strongly related subject (preferred).
· Industry relevant Security qualifications (preferred).
· Industry relevant Project Management qualifications (preferred).
Skills and knowledge

Essential
· Good understanding of SSH Keys and their use.
· Operational documentation creation and maintenance.
· Deep understanding of change disciplines including change and release management and track record of delivering change projects in a timely manner with high quality.
· Security knowledge & appreciation.
· Strong in incident response procedures and standards, strong communication skills and ability to articulate complex events to management.
· Ability to ‘see the big picture' and think strategically around data protection services.
· Strong background in delivering privacy, compliance and data protection services.
· Demonstrated ability to solve complex problems.
· Excellent understanding of wider security and control environment.
· Able to translate underlying technology, security, and infrastructure concepts to business requirements.
· Strong track record of implementing automation to improve efficiency of teams, operations and services.
· Capability to develop scripts and other functionality which enhance or extend security tools.
Preferred
· Exposure of or good understanding of delivering and managing systems in an Enterprise environment.
· Good understanding of security concepts and technologies in the areas of Cryptography (i.e. key management systems, PKI, HSMs, application cryptography, key material handling, standard and non-standard cryptographic algorithms).
· Understanding of Cryptographic Hardware Security Modules (HSMs) and their use within cryptographic operations.
· Understand major internal support functions and services.
· Awareness of the service delivery impacts on confidentially, integrity and availability.
· Good understanding of operational IT security monitoring and administration tools.
· Good understanding of the legal and regulatory requirements around information protection, cryptography and data leakage.

Risk and Control Objective


All Barclay's colleagues have to ensure that all activities and duties are carried out in full compliance with regulatory requirements, Enterprise Wide Risk Management Framework and internal Barclays Policies and Policy Standards.

Benefits

Our customers deserve the best. The same goes for our employees. That's why at Barclays you'll receive a range of benefits that include a competitive salary and all the tools, technology and support you need to succeed.

Our Culture

Everything we do is shaped by the five values of Respect, Integrity, Service, Excellence and Stewardship. The values inform the foundations of our relationships with customers and clients, but they also shape how we measure and reward the performance of our employees. Simply put, success is not just about what you achieve, but about how you achieve it.

Dynamic working gives everyone at Barclays the opportunity to integrate professional and personal lives, if you have a need for flexibility then please discuss this with the hiring manager.

Barclays is an equal opportunity employer and are opposed to discrimination on any grounds. For more detailed information, please visit our dedicated Diversity and Inclusion site here .