SECURIX Expert Service
Security Management Service (Security Engineering)
Experienced security engineers who build and harden the security-relevant parts of your IT and OT systems, from network segmentation to secure remote access, so projects are delivered on time, on budget and to quality.
Solution overview
Security Management Service (Security Engineering) provides experienced security engineers who build and configure security-relevant components within your environment. Working within your project team, the engineer builds and configures components such as separate network zones, controlled remote access and hardened systems. Configurations are documented and handed over so your team can operate and extend them. The service focuses on public sector projects and is also available to private companies with complex ICT projects.
Your business needs
Build security into your technical implementation
Missing specialist capacity
Your internal IT team is occupied with daily operations. Technical project tasks wait because the required network and security expertise is not available.
Configuration gaps
Network zones and access paths require detailed knowledge of IP addressing, network layers and VPNs. Incorrect configurations create security weaknesses and rework.
Security considered too late
When security is added near go-live, findings can require redesign and delay delivery. Security engineering brings the technical security work into the implementation from the start.
Who this is for
Specialist engineering capacity within your project
For cantons, cities, federal offices, healthcare and education organizations, and private companies with complex ICT and security projects that need an individual engineer within their existing project setup.
Head of IT / Infrastructure team
Specialist capacity to build and configure security-relevant infrastructure alongside your operational team.
Project management
Technical delivery capacity for the components your project needs.
Security owners / CISO
An engineer who implements security-relevant components and documents the result for operations and audits.
Our deliverables
Technical security components your team can operate
- Network segmentation — Design and implementation of separate network zones, including firewall rule sets for IT and, where relevant, OT environments, applying IEC 62443.
- Secure access — Controlled access to network zones through VPN or zero trust network access (ZTNA).
- Supporting security infrastructure — Work on infrastructure such as PKI, device management with Intune and secure onboarding of devices, including printers, into segmented zones.
- Technical documentation and handover — Documentation of the implemented components for operations and audits, with knowledge transfer to your team.
- Network and IP design — IP addressing, network layers and routing for security-relevant components.
- System hardening — Application of security baselines, such as CIS Benchmarks, to systems and network components.
- Logging integration — Connecting systems to your SIEM so access and changes stay traceable.
- Project leadership
- PMO and business analysis
- 24/7 operations and managed services
- Full solution delivery
- Licenses, hardware and third-party services
How we deliver
Engineering within your environment and project setup
-
The engineer becomes familiar with your environment and reviews the current technical setup.
-
Design and implement the security-relevant components, such as network zones, controlled access or hardening baselines.
-
Work within your project framework, technical standards and change processes.
-
Document the configurations and transfer knowledge so your team can operate and extend the components.
The first technical results are delivered within the first two to four weeks of the assignment. Customer-side prerequisites include user accounts, remote access and, where required, personnel security clearance.
Frameworks and methods
Engineering that fits your project framework
HERMES
Work within your HERMES project setup. HERMES is the Swiss public sector project management standard and SECURIX’s internal standard.
Agile
Work within your project’s agile approach.
Hybrid
Work within a project setup that combines HERMES governance and agile delivery.
The engineer follows your technical standards and change processes.
References
Security engineering in practice
Customer reference to follow
Frequently asked questions
Before your engineering assignment begins
This service places an individual engineer within your environment and project organization. Full solution delivery by a SECURIX team is a separate implementation service.
The engineer needs the required user accounts and remote access. Where personnel security clearance is required, this should be initiated when the mandate is awarded.
The service includes technical documentation, handover and knowledge transfer so your team can operate and extend the components. 24/7 operations and managed services are not included.
Our security engineers work on site using a laptop you provide and follow your project framework, technical standards and change processes. The assignment is billed hourly for the time needed.
Contact
Let’s discuss your next step
Tell us which security-relevant components your project needs to build. Together, we’ll clarify the engineering support you need.
