Provide professional services to support the Technology Department in the execution of the activities of administration of the technological resources of communications and security of the SIIF Naci on ’ s system SPGR Regalia ’ s application and the other software solutions keeping it tuned and stable during development stage performer and maintain

Provide professional services to support the Technology Department in the execution of the activities of administration of the technological resources of communications and security of the SIIF Nacion’s system, SPGR Regalia’s application, and the other software solutions, keeping it tuned and stable during development stage, performer and maintain. Note: SIIF (Integrated Financial Information System) and SPGR (Budget and Money Orders Regalias’s System) both are financial web application Individual Project Responsibilities • Provide availability to operation of information systems based on the requirements of the entity and/or Sector’s regulation. • Carry out the development, implementation, and maintenance of the assigned information systems, in accordance with the defined methodologies, standards, policies and procedures. • Lead the development of the information system in accordance with institutional needs and established guidelines. • Provide professional support in coordinating the evolution of the architecture of technological services in accordance with the strategic plan of information technologies. • Coordinate technological services in accordance with the defined operating guidelines. • Provide training and technical support to users in the use of assigned production information systems, according to the identified needs. • Keep updated the documentation and reports on the activities inherent to the life cycle of the information systems, in accordance with the procedures established in the matter. • Provide professional support in the management of quality information in accordance with the guidelines of the entity that generates IT policy and best practices. • Keep the governance scheme of the information components updated, in accordance with the criticality of the information and the priorities of the entity. • Participate in the maintenance of continuous improvement of the Entity's Quality Management system in matters within its competence. • Know and apply the Occupational Health and Safety Management System SG-SST, in compliance with current regulations. • Know, comply with and apply the Information Security policies in force in compliance with their functions, reporting any non-compliance with them to the defined instances, in accordance with the area's own processes, procedures and management measurements.

Provision of professional services to carry out the management of computer and perimeter security of the entity 's systems

Provision of professional services to carry out the management of computer and perimeter security of the entity's systems. Individual Project Responsibilities • Professional services to perform security management computing and perimeter of all entity’s systems. • Support the management activities of the risk treatment plan on the IT infrastructure. • Review and analysis of the vulnerabilities of the operating systems and entity information. • Manage the remediation of the vulnerabilities detected in the different IT infrastructure components of the entity. • Provide technical support in the administration of storage platforms NAS, Firewall (Fortigate), WAF and load balancers (F5). • Manage the tools available or implemented in the entity for the vulnerability analysis. • Provide technical support in the implementation and monitoring of security controls information technology to minimize the risks associated with the vulnerabilities detected and that may affect the availability, integrity, and confidentiality of the digital information. • Provide technical support to the IGAC computer office in the review and follow-up of IT contracts and services related to the security platform computing. • Provide technical support in the management and administration of active equipment such as switches, routers, access points, and other equipment associated with communications of the entity.

Lead new architecture security design and integrated organizational based comply with ISO 27001 standard and improve the security access control and monitoring

Lead new architecture security design and integrated organizational based, comply with ISO 27001 standard and improve the security access control and monitoring. Individual Project Responsibilities • Support management planning and information systems, management of security and networking, monitoring of alerts and vulnerabilities to all servers and network devices. • Analyses and Advise the acquisition of active devices to a network and security infrastructure. • Management all infrastructure networking and security, (firewall Fortigate 600D y fortianalizer 1000D), networking (Swich CORE Cisco Catalyst 4500, Switch Access Cisco Catalyst 2960, Switch Procurve HP, Switch Nortel, Access Point AeroHive). • Consulting over all Parques Nacionales’s Offices (6 Cities remote Office and 22 satellites remote office).

Lead new architecture security design and integrated organizational based comply with ISO 27001 standard and improve the security access control and monitoring

Lead new architecture security design and integrated organizational based, comply with ISO 27001 standard and improve the security access control and monitoring. Individual Project Responsibilities • Security and networking design to Secretaria de Gobierno Distrital • Leader of implanting security and network process • Support management planning and information systems, management of security and networking, monitoring of alerts and vulnerabilities to all servers and network devices. • Analyses and advise the acquisition of active devices to a network and security infrastructure. • Management all infrastructure networking an security, (firewall Fortigate 1240B y 200B, fortianalizer 100c), networking (Swich 6509, 3760 and 2960 catalys Cisco System). • Consulting over all District Towns (20 Alcaldias Locales, 5 Casas de justicia, 3 UAOS, 6 CADE, Casas Jovenes, UPJs, Carcel Distrital, Nuse), standardizing best practices in networking, security, service-oriented infrastructure like a ITIL V3 and vulnerability analysis •

Training Entities through technologies conferences about infrastructure perimeter security best practices implementation of high availability for communications and criteria for Internet service Administrator devices perimeter security firewall – Check Point networking manage d Swich Core Cisco ACI Cisco System and load balance BIG -IP F5 SIIF Nation ’ s platform

Training Entities through technologies conferences about infrastructure, perimeter security, best practices, implementation of high availability for communications, and criteria for Internet service. Administrator devices: perimeter security (firewall – Check Point), networking managed (Swich Core, Cisco ACI, Cisco System) and load balance (BIG-IP F5) SIIF Nation’s platform. Individual Project Responsibilities • Managed of VPN encryption devices (Pulse Secure) and digital SSL certificates for encryption of information. • Support the analysis of the information from the monitoring and reported incidents, proposing improvement actions, based on performance indicators, to keep the secure portals and VPNs operational for the SIIF’s solution and related software solutions. • Support the definition and implementation of secure connection models for file transfers, Web Services, and users for the SIIF’s solution and related software solutions. • Support the definition and implementation of access control improvements to the SIIF Nation solution and related software solutions. • Support the improvement and updating of security policies for the SIIF’s solution and related software solutions. • Support the analysis and propose improvements to the security model of the SIIF’s solution and related software solutions. • Verify the applicability of the security model in the solution and new developments of the SIIF’s solution and the software solutions related to it in all its environments. • Support from the management of the infrastructure components in charge, the risk management of the SIIF`s solution and the software solutions related to it.