La posizione è aperta all'interno del team di Leonardo.**Job Description:***Leonardo SpA is an international industrial group, among the leading global players in Aerospace, Defense, and Security, which creates multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security, and Space. With over 60,000 employees worldwide, the company has a strong industrial presence in Italy, the United Kingdom, Poland, the United States, and operates in 150 countries also through subsidiaries, joint ventures, and shareholdings.**A protagonist in major global strategic programs, it is a technological and industrial partner for Governments, Defense Administrations, Institutions, and businesses.*Within the **Cyber & Security Solutions Area**, we are looking for a **System Architect** for our **Rome Laurentina** office.The person will be responsible for managing the technological infrastructure of the P&TI function necessary to support the activities of innovation laboratories specialized in AI, Cyber, Digital, and Quantum technologies, and the divisional product development cycle.Specifically, the resource will be responsible for carrying out the following activities:* Understanding the digital transformation path of the Laboratories and Product Development, in relation to the resulting infrastructure needs;
* Redesign and development of the existing digital infrastructure in response to renewed needs, with particular attention to data security, taking into account the specific needs of each laboratory and technology;
* Guiding the technological evolution of the digital infrastructure, thanks to knowledge of Container-based technologies (OpenShift, Kubernetes);
virtualization systems: VmWare, Canonical, KVM, Docker;and Linux systems (in particular the distributions: RHEL, Centos, Debian, Ubuntu);
* Ensuring the operation of the infrastructure by activating IT in case of malfunctions and failures.**Education:*** STEM Degree (nice to have)**Seniority**SENIOR +5 years, Proven work experience in **systems administration** of **complex infrastructures**.In general, in-depth knowledge of digital technologies, software development methodologies, and emerging technological trends is required, with skills in Cloud Computing (Private, Public, Hybrid), ZTA (Zero Trust Architecture), Cybersecurity, and knowledge of System Administration, Automation, and Orchestration tools.Proven experience in managing complex IT projects (planning and control of activity progress, complexity management, and issue resolution)Optional but appreciated skills in Artificial Intelligence, Cryptography, Programming Languages**IT Technical Knowledge and Skills:****Infrastructure:*** Design of a modern, "Secure-by-Design" DataCenter infrastructure, distributed across multiple geographical sites;
* Experience in the use and administration of Windows, Unix, Linux operating systems (e.G., RHEL, Centos, Debian, Ubuntu distributions);
* Experience in virtualization: e.G., KVM, Docker, Kubernetes, VMware, OpenStack;
* Familiarity with theOpen Source tool ecosystem;
* Database administration: includes configuration and maintenance of database management systems, maintaining data integrity, and managing backups;
* Creation of digital work environments and services based on "bare metal", "virtualization" (e.G., KVM, OpenStack), "containerization" (e.G., Docker, Kubernetes);
* Enablement for the use of "Infrastructure as code" through suites/tools (i.E., Ansible, Terraform);
* Preparation of a local and shared "Software Repository" (e.G., GitLab) among the various LABs, Product Management, Engineering, etc.;
* Installation/Setup of "File Server" / "Share" for secure, authenticated, authorized document sharing;
* Ability to design, configure, and administer a modern Identity Management infrastructure integrated into systems by-design, in line with Zero Trust Architecture (NIST) requirements.**Networking:*** Design of a "Secure-by-Design" and "Zero Trust" network infrastructure;
* Ability to design and manage networks: * WAN, for interconnection of different geographical sites. * LAN, for segmentation of local networks with distinct and dedicated domains, for individual T&I laboratories, for Product Management, for Engineering, Open Innovation area, internal and external development and collaboration areas (e.G., Customers, Partners, Start-ups, etc.);
* Creation of DMZ, forservice exposure and remote access;
**Security:*** Management of administrative access (PAM/IAM) and user access (IAM) with different authentication levels (Multi-factor Authentication – Risk Based Conditional Access) and authorization (e.G., RBAC, ABAC, PBAC) assigned to specific profiles for internal and external resources (consulting / collaboration);
* Creation and implementation of Firewalling rules (NGFW) between different networks and subnets, with policies also at the application level from external to internal and vice versa (NORTH-SOUTH) and internal to internal (WEST-EAST);
* Creation of VPNs (IPSEC site-to-site and SSL) for the creation of secure communication channels between different locations and secure remote user access to internal roles and services;
* Installation/Setup of a SIEM for the collection, analysis, correlation of security events (e.G., Syslog) generated by roles and security devices;
**Behavioral Competencies:*** Problem-solving skills;
* Organizational and planning skills;
* Ability to act in complex contexts;
* Coordination skills with resources from other functions;
* Proactive and determined to achieve objectives;
**Language Skills:*** Proficiency in English, both spoken and written (B2)**Other:*** Possible availability for national travel;**Preferred Qualification:**Professional certifications in the required work experience**Seniority:** Senior**Primary Location:** IT - Roma - Via Laurentina**Contract Type:** Permanent**Hybrid Working:** Hybrid