Solution Architect - DMZ Infrastructure

For our international client in The Hague (NL) we are looking for a short-term Solution Architect - DMZ infrastructure

The basic objective is to provide a detailed architecture design of the DMZ infrastructure taking into account the constraints imposed by the client environment (infrastructure) and policies, and also produce associated implementation recommendations.

Detailed tasks are:

- Propose a scalable global architecture design to initially support 7 Servers and two applications to be deployed: Active Directory Federation Services and LyncEdge service.
- The supported platforms will be Windows Server 2008 R2 and WindowsServer 2012 R2.
- Take into account high availability requirements and the disaster recovery policies.
- Rely on the existing infrastructure in term of virtualization, storage and network..
- Server hardening according to Microsoft's TechNet Security Guidance and VMwareSecurity Hardening Guides
- Propose an adequate server hardening and find the balance between securityand server manageability.
- Securing the virtualization platform (VMware)..
- Server managementPropose a server management strategy regarding at least the following topics:
- Remote accessMonitoring (SCOM 2007 is the standard monitoring tool)
- Patch management
- System protection (antivirus, anti-malware ...).
- Backup and restore.Processes
- Propose a secure provisioning process
- Define the specific processes related to security management
- Risk Identification and Mitigation Strategy:Identify possible risks for the proposed DMZ architecture, and provide a Mitigation Strategy.