Overseas Contractor

Role- IT Engineer Data Discovery Integration One Trust Location  
-London(Hybrid 3 days)

Employment Type

-Subcon Role Summary Were looking for a technically strong IT Engineer to connect One Trust Data Discovery to systems across our environment that store or process personal data Youll be handson gathering application and infrastructure data opening and validating network paths and working with technical SMEs to deploy and configure One Trust worker nodes and connectors You dont need prior One Trust experience you do need deep practical experience across enterprise infrastructure servers databases networking identity cloud and the ability to integrate scanning tools securely at scale

This role sits at the intersection of Cyber Security IT Operations and Application Teams enabling automated discovery and classification of personal data to support compliance risk reduction and data governance initiatives

Key Responsibilities Asset Connectivity Inventor yo Collect and maintain technical metadata hostnames IPs FQDNs environments OSDB versions ports protocols authentication methods endpoints and data custodiansSMEsIntegration Worker Node Deploymento Maintain One Trust Data Discovery worker nodes and required connectorsadapterso

Establish secure connectivity to scan targetso

Validate scanning coverage and troubleshoot connector credential and network issues end to end Credentials Access Managemento Coordinate least privilege service accounts and manage secrets via enterprise vault eg Cyber Ark Hashi Corp Vault Azure Key Vaulto Define and validate required roles permissions for discovery and classification across systems DBs file systems cloud storage SaaSNetwork Enablemento Request and validate firewall rules and security group changes document ports protocols and network paths for discovery jobso

Work with network and platform teams to ensure connectivity adheres to segmentation zero trust and logging standards

Technical SME Collaborationo Partner with application owners DBAs platform and cloud teams to schedule scans define maintenance windows and avoid performance impacto

Document configuration patterns playbooks for repeatable onboarding of new systems

Operational Excellenceo Implement runbooks for connector so

Document integration progress to project team

Complianceo

Support audits by maintaining evidence change tickets approvals network diagrams access reviews

Required Qualifications Technical breadth across enterprise IToOperating Systems Windows Server Linux RHELUbuntuo Databases Stores  SQL Server Oracle PostgreSQL MySQL MongoDB file shares SMBNFS Share Point One Driveo Networking  TCPIP DNS routing NAT TLS proxies firewalls Palo Alto Checkpoint load balancers VPNo

Identity Access ADAzure ADEntra  KerberosNTLM service principals role design

Proven experience deploying scaling infrastructure agents or scanning tools eg vulnerability scanners DLP discovery indexing backup agents EDRExperience with handson with credentials secret management and least privilege access patterns

Excellent documentation skills network diagrams runbooks onboarding playbooks and a collaborative approach with SMEsAbility to manage multiple integrations in parallel track dependencies and deliver to timelines

Note Prior One Trust experience is a plus but not required We will provide enablement for the specific One Trust Data Discovery components

Niceto Have Experience  with One Trust Data Discovery worker nodes connectors discovery jobs scheduling classification tuning

Familiarity with Service Now CMDB change management and automation workflows

Knowledge of data governance privacy concepts PIIPCIPHI data residency record of processing retention

Containerization familiarity Docker Kubernetes for worker node packaging deployment patterns

Key Deliverables1

Asset Onboarding Work through prioritized list of target systems to connect data discovery to2

Connectivity Documentation Document set ups for applications3

Initial Coverage Work with ICRM to complete Catalog scans of applications4

Playbooks Repeatable SOPs for new asset onboarding credential setup and change control