Context
Within an international industrial group specialized in ticketing and transport title validation solutions, you will join an engineering team of about 110 people.
The company designs and deploys hardware and software solutions for transport operators and mobility organizing authorities. These solutions enable management of field equipment, transport titles, remote updates and equipment supervision.
As part of a project based on an existing legacy solution, the company wants to strengthen the security and robustness of its system following a security audit. A first action plan has been defined and tested on a pilot scope including embedded equipment and servers. The challenge now is to resume these actions, industrialize them, deploy them at larger scale and qualify the solution so that it meets the expected security requirements.
The French team is responsible for system engineering, software integration and deployment preparation. Application development is mainly carried out by a team based in India.
The goal of the mission is to take charge of the integration, configuration, security hardening and deployment of Windows environments, both on embedded equipment and on backend servers.
Missions and responsibilities
System integration and Windows environments
•Take charge of system integration of an industrial software solution in an existing Windows environment.
•Prepare and configure embedded Windows environments and server-side Windows environments.
•Verify operating system version consistency and their compliance with security requirements.
•Integrate software components delivered by development teams.
•Prepare reproducible, robust environments suited for industrial deployment.
•Identify and resolve technical issues related to system integration.
System hardening
•Implement actions defined following the security audit.
•Apply necessary security updates and patches, including those related to identified vulnerabilities (CVE).
•Verify system configuration and their hardening level.
•Secure password, credential and secrets management.
•Control authentication mechanisms, rights and access.
•Participate in firewall configuration and security.
•Verify equipment and server compliance with project security requirements.
Infrastructure and system administration
•Configure infrastructure components needed for the solution to function.
•Work on backend servers hosting supervision and equipment management services.
•Verify network flows and access rules between the various components.
•Contribute to the configuration of mechanisms for equipment, key, log and remote update management.
•Participate in analysis of incidents and malfunctions related to infrastructure or system configuration.
Scripting, testing and qualification
•Develop or adapt scripts to automate certain integration, configuration and deployment tasks.
•Carry out necessary technical checks after applying patches and configuration changes.
•Test and qualify environments before deployment.
•Document configurations, procedures and operations performed.
•Contribute to the industrialization of the deployment process and the reproducibility of configurations.
Technical environment
Priority technical skills:
•Windows: administration, configuration, integration and deployment of Windows systems.
•Embedded Windows: understanding of constraints related to embedded environments and historical Windows versions.
•System infrastructure: server administration, system configuration and access management.
•Cybersecurity: system hardening, patch management, vulnerability handling and configuration security.
•Network and firewall: understanding of flows, filtering rule configuration and access control.
•Scripting: ability to write and maintain automation and diagnostic scripts.
•Integration and qualification: system tests, configuration validation and deployment preparation.
Complementary technologies:
•C# / .NET, notably to understand certain existing software components and scripts.
•Legacy software environments and industrial systems.
•Solutions combining physical equipment, embedded software and backend servers.
The exact version of embedded Windows as well as administration and deployment tools remain to be confirmed with the project team.
Profile sought
We are looking for an experienced or senior systems engineer, with strong practical expertise in Windows and able to work directly on the configuration, hardening and deployment of complex systems.
The candidate must notably:
•Demonstrate significant experience in Windows systems administration and integration.
•Have concrete mastery of deploying and configuring Windows operating systems.
•Be able to secure a system environment autonomously.
•Understand issues related to security patches, vulnerabilities, accounts, rights and firewall rules.
•Have a good understanding of interactions between systems, networks, software and equipment.
•Be able to analyze technical problems and work directly on environments.
•Be autonomous, rigorous and able to document interventions.
•Be comfortable in an industrial context with reliability, security and controlled deployment constraints.
Experience in embedded systems integration, industrial IT or the transport sector is a real asset.
Key selection criteria
The following criteria will be particularly decisive during the technical interview:
•Operational mastery of Windows: the candidate must have personally configured and deployed Windows environments, not only worked around these systems.
•System hardening: ability to apply hardening measures, manage patches and secure access.
•Infrastructure skills: understanding of servers, network flows, firewalls and access control mechanisms.
•Technical autonomy: ability to take over an existing action plan and implement it concretely.
•Experience with constrained environments: ability to work with legacy systems and embedded equipment.
A theoretical knowledge of Windows or experience mainly oriented towards coordination, architecture or development will not be sufficient. The need requires an operational profile, capable of performing configurations and deployments themselves.
Languages:
•French: essential for exchanges with project teams.
•English: ability to read technical documentation desired; oral practice is not essential.
Expected results
At the end of the mission, the consultant must have contributed to:
•Implementation of corrective actions from the security audit.
•Securing embedded Windows systems and backend servers.
•Bringing configurations into compliance with project security requirements.
•Qualification of environments before deployment.
•Industrialization and documentation of integration and deployment procedures.
Mission organization
•Desired start as soon as possible.
•On-site presence at Brétigny-sur-Orge three days per week.
•Estimated duration of 12 to 18 months, subject to change according to project needs.
•A technical interview with the manager who directly carried out the first securing and deployment operations.
•Budget to be defined based on expertise level and fit of the profile with mission needs.
Contract type: Freelance / Contract
Daily rate: 700
Location: Paris, France
Work mode: Hybrid
