RQ10478 Technology Architect Senior
Job Summary
Responsibilities/Assignment Deliverables:
- To take a leadership role acting on behalf of ODS Program Implementation Office and the Ontario Digital Service for the technology architecture design and build of a digital credential platform and related products
- To design and maintain a digital credential technology architecture representing the necessary ecosystem components that is based on the world wide web consortium (W3C) verifiable credentials (VC) model utilizing decentralized identifiers (DIDs) DIDComm communication protocols and related industry standards and frameworks such as the PCTF NIST and eIDAS etc
- Work with ministry/OPS staff to lead the development of key (technology) architecture artefacts to support the architectural gating process
- Development of an implementation roadmap and options for a verifiable credential model approach that takes into consideration the requisite components technology required/involved ministry readiness market readiness and maturity; develop short term tactical and longer term strategic implantation plans and options
- Identify and evaluate commercially ready products and open source solutions that are viable for use and implementation; including assessment and recommendations of products
- Align the technology architecture for digital credentialing (VC Model DID) with the Enterprise Identity and Access Management solution to ensure integration where required including alignment with the OPS policy on identity and credential assurance levels.
- Work with product teams to develop the technology requirements and to ensure alignment towards the enterprise solution approach and roadmap.
- Lead and work with technical and product development engineers to develop functional proofs of concept pilot implementations and/or final product implementations of solutions that align with the enterprise digital credential solutions roadmap including digital wallets mobile apps on iOS/Android devices web sites and back-end infrastructure.
- Lead multi-disciplinary and globally distributed teams to solution delivery utilizing collaboration platforms and agile delivery methodology.
- Engage with and facilitate contributions from the OpenSource community to solve solution challenges obtain advice and to align Ontarios approach with the direction of the community.
- Provide technology advice and recommendations to executives management and product teams working on digital credentialing solutions; prepare communications/briefing material as required to effectively communicate recommendations and/or findings from assessments
- Provide expertise and guidance to product policy and technical implementation teams regarding use adoption and alignment with industry standards to maximize interoperability and avoid product lock-in; develop recommendations for adoption of standards and related frameworks for digital identity.
General Role Responsibilities:
- Develops recommends implements and manages the technical architecture (hardware software database and communications) which will be used for all or specific applications in a large distributed cross-platform environment.
- Responsibilities also include the identification of relevant information and the determination of the environment which will be used for development.
General Skills:
- Leadership experience in the development and implementation of technical architectures at the specified experience level
- Extensive experience with at least three different platforms operating systems environments database technologies and communications protocols
- Experience with middleware and gateways
- Knowledge of performance considerations in different environments
- Experience in structured methodologies for the design development and implementation of applications
- Extensive experience in systems analysis and design in large systems environments
- Knowledge and experience designing processes around ITIL and is able to guide others using this methodology
- Experience translating business requirements into reporting needs
- Experience preparing conceptual logical and/or physical processes and data models
- Experience developing recommending implementing and managing technical architecture
- Experience in the use of Computer Aided Software Engineering (CASE) tools and other software tools such as project management tools
- Awareness of emerging technologies trends and directions
- Excellent analytical problem-solving and decision-making skills; verbal and written communication skills; interpersonal and negotiation skills
- A team player with a track record for meeting deadlines
- Experience in developing enterprise architecture deliverables (e.g. models)
Desirable Skills:
- Experience in developing enterprise architecture deliverables (e.g. models) based on Ontario Government Enterprise Architecture processes and practice
- Knowledge and understanding of Enterprise Content Management (Open Text ECM applications)
- Knowledge and understanding of Information Management principles concepts policies and practices
Requirements
Experience and Skill Set Requirements:
Must Haves:
- Demonstrated Technology Leadership and Vision - Develop socialize and obtain buy in for multi-year technology roadmaps and must include recent example involving digital credentials
- 10 years in designing and developing enterprise technology solutions in complex environments with experience in both public/broader public and private sectors
- Experience in developing digital credential solutions including digital wallet solutions on mobile (ie. iOS and Android) devices distributed ledger technologies verifiable credentials (VC) verifiable credential registries verifiable presentations decentralized identifiers (DIDs) use cryptographic suites/tools zero-knowledge proofs
- Extensive knowledge of related standards and market direction - W3C DIF TrustOverIP OIDC and Open Wallet Foundation. Specific technologies JWT/JWS JSON-LD Public/Private key cryptography (EdDSA EcDSA) zero knowledge proofs DIDComm ACA-Py Credo Framework for Digital Wallet Oauth2 OpenID Connect OIDC4VC OIDC4VP
- Extensive Mobile development experience on Android and IOS - React Native Javascript GitHub
Skill Set Requirements:
Technical Experiences:
- OWF ACA-Py Cloud Agent centralized issuer service;
- Credo Framework for digital wallets (formerly AFJ);
- OWF Bifold Wallet
- JOSE/COSE Oauth2 JWT/JWS ECDSA/EdDSA JOSE/COSE ECC/RSA TLS PKI X.509 certificates IETF Status Lists devicebound keys for holder binding (e.g. SDJWTKB (key binding) and mdoc transaction signing).
- Zero Knowledge Proofs (ZKP) ;
- Oauth2 OpenID Connect OIDC4VC OIDC4VP
- DIF Presentation Exchange
- DIDComm
- DID methods: DID:KEY DID:WEB DID:PEER (RFC0627)
- Knowledge with ISO/IEC 180135 (mdoc/mDL) and 180137 (online presentation); familiarity with 232204 operational protocols is an asset.
- Digital wallet development experience in native and/or hybrid app; hardware level encryption (HLE) use of secure elements on mobile devices (e.g. Apple Secure Enclave).
- ReactNative
- Mobile Development
- Microsoft Azure and RedHat OpenShift
Leadership Experiences:
- Demonstrated Technology Leadership and Vision - Develop socialize and obtain buy in for multi-year technology roadmaps and must include recent example involving digital credentials based on SSI and W3C
- Facilitate and build partnerships to establish high performing teams
- Excellent communication skills with ability to engage with a variety of technical professionals and non technical executives. Experienced working within the public sector.
- Experienced with leading and developing architectural documents such as solutions requirements and architecture designs
Required Skills:
- Demonstrated Technology Leadership and Vision - Develop socialize and obtain buy in for multi-year technology roadmaps and must include recent example involving digital credentials
- 10 years in designing and developing enterprise technology solutions in complex environments with experience in both public/broader public and private sectors
- Experience in developing digital credential solutions including digital wallet solutions on mobile (ie. iOS and Android) devices distributed ledger technologies verifiable credentials (VC) verifiable credential registries verifiable presentations decentralized identifiers (DIDs) use cryptographic suites/tools zero-knowledge proofs
- Extensive knowledge of related standards and market direction - W3C DIF TrustOverIP OIDC and Open Wallet Foundation. Specific technologies JWT/JWS JSON-LD Public/Private key cryptography (EdDSA EcDSA) zero knowledge proofs DIDComm ACA-Py Credo Framework for Digital Wallet Oauth2 OpenID Connect OIDC4VC OIDC4VP
- Experience with and understanding of the W3C Verifiable Credential (VC) Data Model VC Implementation Guidelines Decentralized Identifiers trust registries and frameworks.
- Experience with designing/developing digital credential solutions that use/are integrated with trust registries/status lists including use of wallet applications on mobile devices and/or in cloud based environments
- Expertise in designing building and configuring infrastructure in an Azure cloud environment
- Experience in developing solutions utilizing hardware level encryption (HLE) in local and cloud based environments; secure elements on mobile devices (e.g Apple Secure Enclave)
- Extensive Mobile development experience on Android and IOS - React Native Javascript GitHub
- Expert knowledge and experiences on Web 2.0 technologies including HTML5 JavaScript CSS3 jQuery Python
- Expert knowledge in designing and developing solutions using programming languages such as Java C C#
- Expert knowledge and experience with RESTful API services
- Experience designing and developing cloud native solutions; use of containers etc
- Leading technical software engineers through the design process and demonstrating examples through functional code development.
- Experience leading architecture teams and delivery of key design artifacts - including solution requirements and solution architecture documents
- Mange team building through project delivery use of collaboration platforms and agile project delivery. Experience working with cross-jurisdictional / interprovincial teams in a government a setting/environment
- Excellent written and illustration/design skills to formulate technical documentation; evaluation and comparison documents and recommendations for management decision
- Excellent verbal and presentation capability to brief senior management and executives on various components of the technical design architecture and/or solution components.
Technical:
- World wide web consortium (W3C) verifiable credentials (VC) model decentralized identifiers (DIDs) zero-knowledge proofs digital wallets and related industry standards and frameworks such as the PCTF IETF OIDF NIST and eIDAS etc
- Open ID Connect (OIDC) OIDC4VCI and OIDC4VP Oauth2 Security Assertion Markup Language (SAML) JOSE/COSE JWT/JWS ECDSA/EdDSA JOSE/COSE ECC/RSA PKI X.509 certificates IETF Status Lists devicebound keys for holder binding (e.g. SDJWTKB (key binding) and mdoc transaction signing).
- Use of digital wallets on mobile devices and/or in cloud based environments hardware level encryption (HLE) use of secure elements on mobile devices (e.g Apple Secure Enclave)
Analysis:
- Identify and evaluate commercially ready products and open source solutions that are viable for use and implementation; including assessment and recommendations of products and demonstrating benefits and opportunities.
- Understands emerging technologies trends and directions including standards and frameworks
- Analytical problem-solving and decision-making skills
Leadership Skills:
- able to organize lead and manage day to day task for team members develop/assign tasks
- able to organize and prioritize work items for self and team members in a rapid and agile work environment setting.
- use agile methodologies for the analysis design development and implementation of applications in large complex environments
- establish collaborative work environments provide mentoring to diverse staff and project team members
Communications and Reporting:
- Able to develop reports/presentations for various audience types ranging from technical experts non-technical policy analysts to executives.
- Develop and articulate options and recommendations for management and executive level decision makers.
- Communications and interpersonal skills.
Required Skills:
Experience and Skill Set Requirements: Must Haves: Demonstrated Technology Leadership and Vision - Develop socialize and obtain buy in for multi-year technology roadmaps and must include recent example involving digital credentials 10 years in designing and developing enterprise technology solutions in complex environments with experience in both public/broader public and private sectors Experience in developing digital credential solutions including digital wallet solutions on mobile (ie. iOS and Android) devices distributed ledger technologies verifiable credentials (VC) verifiable credential registries verifiable presentations decentralized identifiers (DIDs) use cryptographic suites/tools zero-knowledge proofs Extensive knowledge of related standards and market direction - W3C DIF TrustOverIP OIDC and Open Wallet Foundation. Specific technologies JWT/JWS JSON-LD Public/Private key cryptography (EdDSA EcDSA) zero knowledge proofs DIDComm ACA-Py Credo Framework for Digital Wallet Oauth2 OpenID Connect OIDC4VC OIDC4VP Extensive Mobile development experience on Android and IOS - React Native Javascript GitHub Skill Set Requirements: Technical Experiences: OWF ACA-Py Cloud Agent centralized issuer service; Credo Framework for digital wallets (formerly AFJ); OWF Bifold Wallet JOSE/COSE Oauth2 JWT/JWS ECDSA/EdDSA JOSE/COSE ECC/RSA TLS PKI X.509 certificates IETF Status Lists devicebound keys for holder binding (e.g. SDJWTKB (key binding) and mdoc transaction signing). Zero Knowledge Proofs (ZKP) ; Oauth2 OpenID Connect OIDC4VC OIDC4VP DIF Presentation Exchange DIDComm DID methods: DID:KEY DID:WEB DID:PEER (RFC0627) Knowledge with ISO/IEC 180135 (mdoc/mDL) and 180137 (online presentation); familiarity with 232204 operational protocols is an asset. Digital wallet development experience in native and/or hybrid app; hardware level encryption (HLE) use of secure elements on mobile devices (e.g. Apple Secure Enclave). ReactNative Mobile Development Microsoft Azure and RedHat OpenShift Leadership Experiences: Demonstrated Technology Leadership and Vision - Develop socialize and obtain buy in for multi-year technology roadmaps and must include recent example involving digital credentials based on SSI and W3C Facilitate and build partnerships to establish high performing teams Excellent communication skills with ability to engage with a variety of technical professionals and non technical executives. Experienced working within the public sector. Experienced with leading and developing architectural documents such as solutions requirements and architecture designs Required Skills: Demonstrated Technology Leadership and Vision - Develop socialize and obtain buy in for multi-year technology roadmaps and must include recent example involving digital credentials 10 years in designing and developing enterprise technology solutions in complex environments with experience in both public/broader public and private sectors Experience in developing digital credential solutions including digital wallet solutions on mobile (ie. iOS and Android) devices distributed ledger technologies verifiable credentials (VC) verifiable credential registries verifiable presentations decentralized identifiers (DIDs) use cryptographic suites/tools zero-knowledge proofs Extensive knowledge of related standards and market direction - W3C DIF TrustOverIP OIDC and Open Wallet Foundation. Specific technologies JWT/JWS JSON-LD Public/Private key cryptography (EdDSA EcDSA) zero knowledge proofs DIDComm ACA-Py Credo Framework for Digital Wallet Oauth2 OpenID Connect OIDC4VC OIDC4VP Experience with and understanding of the W3C Verifiable Credential (VC) Data Model VC Implementation Guidelines Decentralized Identifiers trust registries and frameworks. Experience with designing/developing digital credential solutions that use/are integrated with trust registries/status lists including use of wallet applications on mobile devices and/or in cloud based environments Expertise in designing building and configuring infrastructure in an Azure cloud environment Experience in developing solutions utilizing hardware level encryption (HLE) in local and cloud based environments; secure elements on mobile devices (e.g Apple Secure Enclave) Extensive Mobile development experience on Android and IOS - React Native Javascript GitHub Expert knowledge and experiences on Web 2.0 technologies including HTML5 JavaScript CSS3 jQuery Python Expert knowledge in designing and developing solutions using programming languages such as Java C C# Expert knowledge and experience with RESTful API services Experience designing and developing cloud native solutions; use of containers etc Leading technical software engineers through the design process and demonstrating examples through functional code development. Experience leading architecture teams and delivery of key design artifacts - including solution requirements and solution architecture documents Mange team building through project delivery use of collaboration platforms and agile project delivery. Experience working with cross-jurisdictional / interprovincial teams in a government a setting/environment Excellent written and illustration/design skills to formulate technical documentation; evaluation and comparison documents and recommendations for management decision Excellent verbal and presentation capability to brief senior management and executives on various components of the technical design architecture and/or solution components. Technical: World wide web consortium (W3C) verifiable credentials (VC) model decentralized identifiers (DIDs) zero-knowledge proofs digital wallets and related industry standards and frameworks such as the PCTF IETF OIDF NIST and eIDAS etc Open ID Connect (OIDC) OIDC4VCI and OIDC4VP Oauth2 Security Assertion Markup Language (SAML) JOSE/COSE JWT/JWS ECDSA/EdDSA JOSE/COSE ECC/RSA PKI X.509 certificates IETF Status Lists devicebound keys for holder binding (e.g. SDJWTKB (key binding) and mdoc transaction signing). Use of digital wallets on mobile devices and/or in cloud based environments hardware level encryption (HLE) use of secure elements on mobile devices (e.g Apple Secure Enclave) Analysis: Identify and evaluate commercially ready products and open source solutions that are viable for use and implementation; including assessment and recommendations of products and demonstrating benefits and opportunities. Understands emerging technologies trends and directions including standards and frameworks Analytical problem-solving and decision-making skills Leadership Skills: able to organize lead and manage day to day task for team members develop/assign tasks able to organize and prioritize work items for self and team members in a rapid and agile work environment setting. use agile methodologies for the analysis design development and implementation of applications in large complex environments establish collaborative work environments provide mentoring to diverse staff and project team members Communications and Reporting: Able to develop reports/presentations for various audience types ranging from technical experts non-technical policy analysts to executives. Develop and articulate options and recommendations for management and executive level decision makers. Communications and interpersonal skills.