IT Engineer supporting Science Operations

Job ID: SCO-118

Deadline: 10 Febraury 2016

Aurora is an established supplier of skilled manpower to ESA and in particular at ESTEC and ESAC. Aurora has the opportunity to expand our support within ESAC.

Overview

This work package is intended to provide a number of specialised services to support ESA in Computer System Engineering at ESAC for the missions’ science operations centres.

The SCI-O Computer Support Group (CSG) is providing computer support to all science operations centres and science ground segments located at ESAC, either in development or in operational phase. Under this work package, service shall be provided to support ESA in system administration activities for those computer systems used for science operations and research activities. These computers are general servers or workstations mainly based on Linux and Oracle Solaris, Macintoshes, Technical PCs and for Office Automation activities. The environment also includes Disk Storage infrastructure, Virtual infrastructure as well as GRID and Cloud computing infrastructures. Systems can be physical machines or provided through virtual infrastructure. These systems are connected to networks organized by functions (operational, office and development, external services, GRID, Cloud and administration networks).

General tasks would include:

  • Installation, configuration, deployment, integration, monitoring, administration and maintenance of these computer systems;
  • Scientific and commercial software installation and administration;
  • Data backup and retrieval;
  • Interface with IT vendors for quotation;
  • Installation and maintenance agreements;
  • Users IT support;
  • Defining and operating computers operational procedures;
  • Hardware inventory tracking.

NOTE: It specifically excludes ESA corporate informatics infrastructure services (office automation, network, terminal servers, Lotus Notes, LAN and communications), which are provided and subject to separate Service Level Agreements (SLA).

Specific Service Tasks

Office computers security:

  • Definition of Linux, Macintosh and Windows office computers security templates
  • Implementation, maintenance and monitoring of office computer security policies
  • Incident analysis and response
  • Issues of documentation and technical reports

Datacentre IT systems security:

  • Definition of Unix (Linux, Solaris), Macintosh and Windows servers security templates
  • Implementation, maintenance and monitoring of datacentre systems security policies
  • Preparation of Systems Security Plans, analysis of ESACERT vulnerability reports and implementation of remedy actions in collaboration with the system users
  • Analysis of the security aspects of storage devices, switches, tape libraries, virtualization, cloud and grid infrastructures
  • Definition of system patching policies and methodology

IT security prevention activities:

  • Installation, configuration, operations, maintenance and upgrade of and Intrusion Prevention System
  • Conduct regular penetration tests for systems in DMZ
  • Conduct regular vulnerability scans for systems and applications in DMZ
  • Preparation of reports and proposals for improving the security in DMZ

IT security incidents activities:

  • Definition of forensic procedures for datacentre and office computers
  • Interface with ESACERT during the security incident investigations
  • Conduct forensic analysis of the systems compromised and elaborate reports with findings, remedy actions and proposals for security improvements
  • Maintain a record of historical security incidents in SCI-O

Others:

  • Elaborate reports with proposals for improving the overall SCI-O systems security
  • Investigate the security constraints of the new virtualization technologies (dockers, cloudforms)
  • Definition and automation of IT security procedures
  • Interface with external ESA corporate informatics infrastructure service providers
  • Participate in the design of network setup requirements and follow up of implementation, focusing on security aspects
  • Maintain the CSG web pages related to IT security.
  • Provide technical inputs to the SCI-O ESAC PSSO

Specific qualification requirements

  • At least a University degree or equivalent in computer science or related fields.
  • IT security methodology.
  • IT forensic analysis.
  • Intrusion Prevention and Detection systems.
  • Storage SAN/NAS technologies.
  • Solaris System management.
  • Linux (RedHat) system management.
  • Virtualization technologies.
  • Backup technologies.
  • PC Windows and Macintosh system management.
  • Network security design and requirements.
  • Good interpersonal and communication skills, together with a pro-active attitude to problem solving and customer focus are required.
  • The candidate should be comfortable in an international working environment and be fluent in written and spoken English, one of the official language of ESA.

Legal and Security Requirements

  • All applicants must be legally allowed to work in Spain without the need to obtain a work visa. Only European Union citizens can be employed by Aurora in Spain.
  • Applicants are required to provide a copy of their passport and degree certificate. Aurora will validate the Degree with the issuing University and provide evidence to ESA.
  • In line with ESA’s security requirements, prior to issuing a letter of employment the applicant shall provide to Aurora a recent official document declaring that they are of good conduct from the country where currently resident, and Aurora will validate your employment history.

Location

It is expected that the work will be performed at the ESAC, the European Space Astronomy Centre, at Villafranca del Castillo, near Madrid, Spain.

Contract

  • You will be registered for both social security and tax in Spain.
  • The standard working hours are 40 per week. There are 12 public holidays and an additional 30 annual days holiday.
  • In addition to public health services Aurora provides private medical insurance in Spain.
  • Training to improve efficiency and provide strength for future career are of course included.
  • Aurora can assist financially and provide recent experience information for relocation.

To be considered for this Position

Provide prior to 10 February 2016 a summary of why you are a good candidate for the position together with a complete and detailed
Recruitment Form or your CV with a motivation letter to Mr. Davide Starnone, at email davide.starnone@aurora.nl quoting reference SCO-118.

Aurora will agree conditional employment terms and conditions with candidates before presenting their detailed technical proposal and candidates to ESA by 17 April 2017, 13:00 hours.