Under the direction of the Section Head of D&I the contractor shall:

Solution architecture:

• Contributes to the development of solution architectures in specific business, infrastructure or functional areas;
• Identifies and evaluates alternative architectures and the trade-offs in cost, performance and scalability;
• Determines and documents architecturally significant decisions;
• Produces specifications of cloud-based or on-premises components, tiers and interfaces, for translation into detailed designs using selected services and products;
• Supports projects or change initiatives through the preparation of technical plans and application of design principles;
• Aligns solutions with enterprise and solution architecture standards (including security).

Cybersecurity:

• Provides guidance on the application and operation of elementary physical, procedural and technical security controls;
• Explains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems;
• Identifies risks that arise from potential technical solution architectures;
• Designs alternate solutions or countermeasures and ensures they mitigate identified risks;
• Investigates suspected attacks and supports security incident management.

Requirements definition and management:

• Defines and manages scoping, requirements definition and prioritisation activities for initiatives of medium size and complexity;
• Contributes to selecting the requirements approach;
• Facilitates input from stakeholders, provides constructive challenge and enables effective prioritisation of requirements;
• Establishes requirements baselines, obtains formal agreement to requirements, and ensures traceability to source.

User experience analysis:

• Selects appropriate techniques and tools to develop user stories and elicit user experience requirements in complex situations;
• Identifies and describes the design goals for systems, products, services and devices;
• Identifies the roles of affected stakeholder groups;
• Resolves potential conflicts between differing user requirements;
• Specifies measurable criteria for the required usability and accessibility of systems, products, services and devices.

Project implementation responsibilities:

• Provides cyber security technical and professional input and technical leadership to engineering projects. These contributions will include, but are not limited to, statement of work preparation, execution planning, cyber items procurement, cyber security delivery effort coordination between assigned hands-on engineers within NCIA and NCSC by following multi-layer change management framework, problems identification and resolution, internal and external to NCSC quality control management, contribution to internal written and not written knowledge management, results' documentation (system post-implementation specifications, instructions, updates to cyber security services documentation), handover to NCSC cyber security services for operations and operations and maintenance costs calculations;
• Provides technical input and support to acquisition projects including, but not limited to, writing and reviewing / coordinating cyber security requirements (statement of work, system design specification, high and low level design blueprints, bill of material), supporting procurement process (providing answers to raised questions); evaluating bids;

General responsibilities:

• Develops and presents cyber security scientific, engineering, technical, and marketing information suitable for official meetings;
• Represents the NCIA/ NCSC in working groups and forums;
• Executes tasks assigned by Branch, NCSC Service Delivery Managers and Resource manager.