Definition of a Group-wide SOA Security Architecture.

Design a transport-level security concept for an existing SOA infrastructure and ESB implementation, including a fine-grained authentication/authorization model and central governance by fully integrating with an existing service repository and PKI (Public Key Infrastructure).

Responsibilities range from initial requirements engineering and alignment with all internal and external stakeholders to driving and steering the group-wide standardization and reference implementation.
The latter further involves supporting demand and release management units by raising the necessary change and feature requests and assessing/approving all relevant development documentation.

Leverage the migration of over 100 participating systems by consulting with business analysis, system design and project management.
After successful local implementation further manage the international roll-out to affiliates in DE,AT, CZ, HR, HU, NL, MK, PL, SK and the UK under the umbrella of an overarching ESB Security Program, including winning buy-in from senior management.
Permanently act as bridgehead towards security and privacy units regarding compliancy with company standards and requirements.
In this context, specifically manage an ESB hardening project to improve overall security from the OS and network infrastructure levels (including international traffic routing/firewalling) up to designing a desaster recovery/business continuity strategy including distributed data centers.

Further design a protocol-level extension from HTTP/HTTPS towards JMS (native plus IBM WebSphere MQ series) to widen the direct footprint of the ESB as well as to leverage interoperability with other persisting ESB technologies in the group.

Finally analyse and project manage the migration of B2B/ partner connections to a new target platform (app. 50 systems attached via VPN and/or Internet, >100 web service interfaces).

Industry

Telecommunications

Role

Senior Project Manager