Consultant Microsoft Global Secure Access

Context

To increase the security of the administration of its most critical assets, a leading company has designed a Privileged Access Workstation called NEO Red. Initially designed to secure access to Windows servers hosting Directory Controllers and PKI, the company is extending the scope of this PAW to the administration of cloud environments like Azure and AWS platforms. The first design of NEO Red was based on Zscaler to enforce some cyber requirements. However, Zscaler is not able to fully fulfill all the new requirements, and the company is considering Microsoft Global Secure Access as a complement to Zscaler. As MS GSA is not part of the current solution catalog, there is limited knowledge of the solution, and assistance is sought.

Missions

• Assist the company in the design of the NEO Red workstation with Global Secure Access
• Validate and test the colocation of Zscaler and Global Secure Access on the same workstation
• In case of non-compatibility, review the current design to fully substitute Zscaler by Global Secure Access
• Implement a full proof of concept and produce proof of cyber requirement enforcement
• Produce the target architecture
• Deliver high-level design and low-level design documents
• Assist operation teams in producing their BAU documents

The company is looking for assistance with strong knowledge of Microsoft Global Secure Access and successful experience in deploying the solution.

Tools & Environment

The company is considering deploying the following features of Global Secure Access:

• Entra Internet Access
• Entra Private Access
• Universal Continuous Access Evaluation, especially in relation to Microsoft EntraID Protection
• Universal Tenant Restriction

The exact list of cyber requirements to fulfill will be disclosed at the beginning of the mission.

Working Conditions

• All deliverables and most meetings will have to be in plain English
• The mission can be performed remotely
• If possible, some meetings may be located in Paris La Défense
• The estimated delivery deadline is end of October
• Intermediate delivery milestones will be discussed at the beginning of the mission

1. Strong knowledge of Microsoft Global Secure Access
2. Successful experience in deployment of Microsoft Global Secure Access
3. Advanced skills in Zscaler
4. Confirmed skills in Microsoft EntraID
5. Confirmed skills in Cybersecurity