Ali A.

EIP GLOBAL EXCHANGE PLATFORM PROJECT (INTEGRATOR BUDGET ≈ €1M / YEAR)

The EIP global enterprise exchange platform is intended to be the exchange hub for all Thales internal and external flows. The objective is to implement an application gateway for all the company's application exchanges based exclusively on IBM technologies.

MAIN RESPONSIBILITIES:

Project Manager:

Steering DEV activity and coordination of the SSG team (11 people including a senior architect, 2 Tech Leads, and an offshore Indian team (Noida))

Management & monitoring of daily tasks in agile mode with the TGS client

Facilitation of technical committees and meetings (catch-up, Daily, ...)

Client relationship management (Project Committee, Steering Committee)

Steering the response to the SSG contract renewal tender (Sopra Steria shortlisted with IBM and Accenture)

Guarantee of the Delivery process with respect to the client (HLD, LLD, Prerequisites, Install Doc, Release Note, etc…)

Guarantee of adherence to architecture directives and orientations during the Build phase.

Architecture:

Capturing client needs

Producing architecture documents during the needs maturation phase (Demand Management)

Presenting technical solutions to TGS

Architecture Committee with solution architects and the TGS Product Owner.

PROJECT PORTFOLIO (BIG DATA FOUNDATION BUDGET ≈ €10M / YEAR)

Monitoring security themes on the group's various Big Data platforms (HDP, HDF, HCP, CDP, Kafka, HBase, ELK, C2, C3 clusters...), in accordance with the CISO's expectations and recommendations. The objective is to ensure security and control operational, financial, and legal risks in order to sustain the platforms and satisfy the ROI requested by the program sponsors. Architecture and technology choices on acquisition, storage, processing, restitution, and publication chains impacting several assets are challenged. Studies & analyses remain related to the choice of Big Data service offerings differentiated according to business needs and constraints.

MAIN RESPONSIBILITIES:

Taking into account the group's SSI policy and SSI operational activity around the Big Data ecosystem by gathering needs and understanding the context, analyzing risks, proposing recommendations, steering security audits, and supporting business security correspondents.

Qualification and contextualization of GTS infra offerings (micro-segmentation, admin bastion, backup, encryption, vulnerability scanning, Audit…).

Management of cyber risk, compliance of Big Data components by providing standard security analysis deliverables, by proposing assistance in drafting contracts, the Supplier Security Assurance Plan (PASF), and Big Data-related security policies and rules.

Leading a security hardening project for the platform's various technological components (50+ components).

Construction, presentation, sharing, and publication of the annual Big Data Security Roadmap for CISO RBDF, GBIS, Group/TPS, ASSU, PRIV….

Participation in agile prioritization workshops for the Big Data foundation team (PI Planning, Retrospective, Foundation Review, Backlog, …).

Taking charge of data governance and implementing a Data Catalog for business Data Lineage needs.

Study of the opportunity to migrate to the Digital IAM program (local vs. central LDAP, Master/Slave Architecture, Kerberos AD vs. MIT, Ranger, ACL, …).

Steering the implementation of Qualys probes on the foundation and appropriation of the standard GTS vulnerability management process for Big Data.

Scoping and feasibility study of security alerting solutions and SOC integration, particularly for detecting abnormal behavior (Apache Metron).

Monitoring the BB project and architecture patterns addressing D and I needs adapted to different SLAs (ingestion, collection, persistence chains, …).

Opportunity study on so-called "Ephemeral Data Labs" offerings, particularly for Data Science access and exploratory work with subscription portals.

Cloud migration study (Lift&Shift, Adapt&Shift / IaaS, Replatform, Refactor / PaaS with Trust&Control process, Hybrid Cloud, Cloudera vendor offerings).

MEDIA COMMUNICATIONS:

http://bit.ly/2Go2mFo / http://bit.ly/2GoAiBQ / http://bit.ly/2GnVMhX / http://bit.ly/2Gq7qsX