GF Financial Markets I.T. Architecture Role

Transcription

1 GF Financial Markets ( GFFM ) is a London-based wholly owned subsidiary of GF Securities, one of China s largest security houses. GFFM is FCA regulated and a Ring Dealing member of the London Metal Exchange. For more information regarding the Company and its Group, please refer to the information in the Company website ( The Role I.T. Architecture Role Whilst this role is a manager level role, managerial responsibility should only account for 20% - 30% of the tasks performed. It is a hand-on role which requires detailed technical knowledge and capabilities. These key technical tasks have been highlighted below. Should you wish to make an application for this role, we are asking that applicant s complete the Technical Skill Checklist (See Appendix) at the end of this document with their technical skill rating (together with a detailed CV), based on practical technical capability to build and configure all systems/ applications etc. that have been listed. Programming: The role is not a development/programming role. So knowledge of programming languages is not a requirement e.g. c/c++ DotNet, etc. If this is a core part of the applicant s profile, then this is not a role for them. Whilst it s useful to know programming, it is not a core part the role. Window and Microsoft application knowledge: The infrastructure is mainly a Microsoft environment, with emphasis on Windows 2012, Windows 7, Exchange 2010/2013, HyperV, RDS, IIS. This is critical to the role and therefore if the applicant does not have all of these skills then they will not be considered for the role. It is important that the applicant has a detailed technical understanding of Windows 2012 server and Exchange Server and their associated services. Networking experience: Network experience is important, and ideally the applicant would have experience in HP ProCurve and Juniper, but firewall/switch knowledge is transferable from other vendors. What is important is that the applicant are not JUST a network person, they need to have other infrastructure skills. Linux experience: Ideally the person would have Linux experience.

2 FORMAL JOB DESCRIPTION Name & Surname: Title: IT Architecture Department/ Products: IT Production GF Financial Markets (UK) Limited GFFM Reporting line: Head of Operations & IT Other reporting lines: CEO / MD Number of direct and indirect staff reporting to position and job titles: 1 One direct report, IT analyst role. 1. Level of authorisation and degree of autonomy: 2. Specialist/technical or professional qualifications, including any registrations (FCA or Other) required: 3. Is the job holder an Approved Person? If so, under what FCA Controlled Function: 4. Overall purpose of the role and a summary of the main responsibilities (to include decision making and operational responsibility): 5. Summary of Control Responsibilities of the Role: Source external software and hardware which is reliable, cost efficient and will satisfy GFFM s business requirements Purchase Licenses enabling us to use external software N/A No Build and maintain GFFM s network server and workstation environment to ensure we have business continuity and a high level of security. Maintaining permissions on network drives and applications Maintaining security policies for access to internal and external systems Maintaining procedures ensuring they are kept up to date with best market

3 6. Main Duties of the Role (Indicate if any are shared, if so with which role): GF Financial Markets I.T. Architecture Role practice Ensuring compliance with current licensing policies Manage the connectivity to exchanges, Internet, between our primary and secondary data centres and other sites Design and maintain GFFM s architecture Daily system checks including back-ups, software compliance, security patch management and other anomalies Reviewing security logs for access internal and external Performance tuning to ensure systems are running efficiently Setting up new users according to business requirements and the correct level of authorisation Monitor various connections internal and external ensuring outages are dealt with promptly Preparing servers for new applications and monitoring them daily Setting up / building new PC s to comply with internal policy Maintaining relationships with data centre providers and other software vendors ensuring issues are dealt with quickly and allowing the relationship to run smoothly Analyse and perform market research ensuring best cost and product sourced Become involved with various projects which have an IT element as assigned by senior management. Ensuring GFFM s business continuity is kept up to date when new systems are added documenting and testing of redundancy and fail over is working Monitor the power consumption of both data centres ensuring we do not breach the limit of both sites. Capacity planning of PC s, storage on various servers and overall performance Keep the security policies up to date and relevant Ensuring other electrical devices are compliant such as the TV s video conferring, lighting and air conditioning. Any Broadgate issue must be escalated to the Broadgate management team. Ensure the telephone systems are compliant, user that are required to have a recorded telephone are set up and advised. Ensure mobile devices and remote access is secure and can be removed safely at any time without data loss Ensure the perimeter access control system is kept up to date and new starters are issued with correct access permissions. Also that contractors and visitors issued with temporary can only access specific areas and/or systems Ensure new installations and modifications to existing installations have the correct way leaves and or permits. When required maintain the Building Management System as this controls the building s air temperature. 7. Key skills, experience and personal attributes required and problem solving: Strong understating of IT Architecture including design, best practice, hardware, software, middleware and security. Experience analysing complex issues and solving problems to resolution in a busy environment Strong organisational skills and the proven ability to deliver projects on time

4 and within budget Ability to design and build system architecture from business requirements Knowledge of Microsoft Suite including: Windows Server, Workstations, Exchange (cas,mbx), SQL, DPM, WSUS, Hyper-V, Active directory, Domain Controllers, DNS, DHCP, Group Policy, Sites and Services, File and Print, IIS, SCVMM, Volume Licensing, Office Suite, VBA to an intermediate level, and windows host script Knowledge of UNIX or LINUX based systems for applications deployment and security including scripting Knowledge of network equipment and technology including Juniper Firewalls (SSG & SRX including NSRP and VPN), HP core routers and switches. Knowledge of network storage (iscsi) Knowledge of virtualisation technologies (Hyper-V) Knowledge of HP Proliant rack servers and desktops Knowledge of telecommunications including handsets and PABX (AVAYA ip500) Knowledge of wider WAN technologies Knowledge of wireless technologies 8. Communications and contacts (if applicable): 9. Working conditions (If not standard working hours please state shift system used) Internal Liaise across all departments understanding requirements and problems External To be able to discuss clearly what GFFM s requirement are enabling us to source the correct vendor Maintaining and cultivating external vendor relationships ensuring they run smoothly Must be able to liaise with exchanges to ensure correct connectivity achieved Good listening and negotiation skills Overnight support on a rotation basis

5 Managing Director (MD) / CEO GFFM GF Financial Markets I.T. Architecture Role Reporting Line and organizational chart Head of Operations & IT IT Architecture Manager

6 APPENDIX TECHNICAL SKILL CHECKLIST Can all applicants provide a 1-5 technical rating of the following skills (5 is very strong knowledge, 0 = no knowledge): Technical Area Technical Rating of Applicant Microsoft Server 2012/2012R2 Microsoft Windows 7 Microsoft Exchange 2013 inc Client access services, Mailbox roles, SMTP routing, Smarthosts Microsoft AD, GPO, DNS, DHCP, DFS(R), Domain controllers, FSMO, Microsoft SQL Microsoft Remote Desktop Services Microsoft Cluster Server Microsoft Windows Server Update Services (WSUS) Microsoft Volume licensing Microsoft Exchange Online Protection Microsoft Certificate Authority (CA) Microsoft Print Services Microsoft Task Scheduler DNS in split horizon Internal/External Ubuntu Linux Server & Desktop Redhat, Centos, Fedora Linux Sun/Oracle Solaris & Linux IBM OS/400 Apache Squid php Mysql, MariaDB NFS Samba Proftpd Openssh and certificate management NTP Vmware ESX(i) & vcentre Microsoft HyperV & SCVMM Microsoft Data Protection Management

7 Juniper SSG & SRX HP & Cisco EDGE/CORE switches VLAN VPN route based and policy based Firewall zones (trust, untrust, dmz...) Static and Dynamic routing Source and destination routing BGP, Route maps, Access lists, Import/Export lists Virtual routers WAN circuits - P2P Links, ELAN VIP, DIP, MIP, Natting. Ubiquity unifi HP, Rack servers HP Desktops & Portables HP Storevirtual iscsi Storage iscsi NAS MPIO Bitdefender AV Nagios, Icinga, OpenVAS MRTG Batch, Shell, SQL scripting Avaya IP500 Redbox recording