Zero Trust Consultant - Fintech - Stockholm

We require a consultant to join a task force of Engineers to analyse our use case, the surrounding conditions and the business challenge to implement a Zero Trust environment.

Skill-set desired:

• You know how to implement Zero Trust networking concepts in the real world, and how to go from starting small with an MVP in existing environments up to implementing a full stack Zero Trust concept inspired by Google BeyondCorp. 
• You have up to date knowledge regarding Technologies and Products available on the market, and are able to help us find the suitable enterprise-grade stack that we need. You have in-depth knowledge regarding, 
  - F5 bigIP APM module/ F5 VPN Client (specifically, certificate based device identification in       combination with user authentication during VPN connection) 
  - Aruba Clearpass (EAP-FAST/EAP-Chaining support); 
• You are a pro when it comes to, 
  - Network authentication and authorization based on machines and users 
  - (EAP-FAST/EAP-chaining support for supplicants); 
  - PKI / Certificate infrastructure including related components, protocols and processes (ORCA, SCA, CRL, WES (including SCEP and NDES etc.) 
  - Certificate Issuing, handling and revocation for Mac OS X, Windows 10, Linux (Ubuntu) and mobile devices (Android, iOS) 
  - Certificate secure storage on devices in TPM or OS (Linux, Mac OSX) 
    → secure, meaning “not exportable, not changeable” 
• Ideally you have experience with 
  - Cloud connectivity between Azure and AWS (PKI with SCA, SCEP/NDES in AWS) 
  - Cloud connectivity between Jamf and AWS (PKI with SCA, SCEP/NDES in AWS)