Hi, Let me know if you have any one for this.* Please respond to [email protected]
Position: Business Analyst* * Location: Appleton, WI* * Duration: 6 months* *Role: Business Analyst* The project has the need for a technically inclined Business Analyst to assist with the requirement gathering for the following two sub-projects: 1. Data Loss Prevention (DLP): Research ways to protect data in the client network that is: a. At rest: data in a database or file b. In use: data displayed or printed c. In motion: data as it is accessed and passed throughout the client network This will be accomplished through the use of perhaps several tools as the usage across the enterprise is too variable to resolve this with a single tool. 2. Network Access Control (NAC): Research ways to enhance the client network via: a. Enhance and expand use of SSL/VPN b. Implement enhancements for 802.1x networks c. Appropriately zone the servers in the clients network d. Enhance the clients wireless security Since both of these efforts are very technical in nature, we require the Business Analyst to have a technical background (solid development, network, or other hands-on experience). *Skills required:* 1. Meet deadlines 2. Ability to effectively gather, document, and manage requirements 3. Ability to write effectively to assist project management with the completion of the clients TQMS documentation (Business Case, Project Definition, etc.) 4. Ability to effectively assist with the building of work plans and estimates 5. Ability to effectively conduct interviews and meetings with a wide variety of resources – both business and technical 6. Ability to understand the technologies being considered as solutions. A technical background (development or networking) will enhance the BA’s ability to complete their assignment. Areas of technology being considered for these assignments: Job Description DLP: the work will include the definition phase by taking the following into consideration: 1. Identify the types of information assets that the clients is committed to and/or legally required to protect. 2. Identify the assets that contain (or may contain) the information that we will protect 3. Identify the exposure vectors that exist to access the various assets. 4. Refine the identified asset and exposure vector grid to develop the functional requirements for the DLP product evaluation and selection. 5. Identify DLP tools (new to the client –or- those that the client may already own, but not fully utilize the features) that effectively protect the assets from unwanted exposures. NAC: To address the Network Access Control (NAC) the work will include the definition phase by taking the following into consideration: 1. SSL VPN a) Migrate contractors, key service providers (KSPs) and any other client based IPSec VPN users on non-client hardware to SSL VPN web portal b) Migrate Corporate, Field, Bank employees, contractors, KSPs, and any other client based IPSec VPN users using the clients hardware to AnyConnect. c) Adding SSL licenses for production and BCP network d) Design and implement a certificate authority infrastructure for digital certificates. 2. 802.1x a) Implementation of 802.1x in site to site tele-worker and remote offices b) Develop and implement automated solution for trusted non-compliant hardware c) Implementation of 802.1x in Corporate and Bank campuses d) Purchase and implementation of two small ACS devices to manage dot1x for the Bank. 3. Server Zoning a) Finalized zoning strategy and diagram b) Create: Architecting and engineering of new IP subnets for new servers that will have access to sensitive data for both test and production networks. c) Define rules: Define process and rules for zoning. Rules within each zone and rules within each subzone. d) Configure zone: Configure access control per rules defined to limit access from the user zone to the new trusted zone. e) Purchase, configure, and install IDS to go between user and trusted zones. f) Migration strategy/process: g) Develop Operational Processes: a. Architectural requirements for new applications that need to be in restricted zone. b. Guidelines to determine when restricted zone is appropriate for new applications c. Policy controls to limit access for administrators to the VM-workstation zone to new trusted zone 4. Wireless Security a) Replace Air Magnet with Cisco Adaptive Wireless IPS. -- Regards, Shiv Kumar Resource Manager, Marlborough MA C#: 781-544-4799 Ext: 110 Fax. 508.519.9180 [email protected] www.Boston-technology.com http://www.linkedin.com/in/rajaskumar http://groups.google.co.in/group/bostontech
