Rails Developer

Description

UC Information Security Office (ISO) is updating the Minimum Security Standards for Electronic Information (MSSEI). One requirement for this update is a user-facing interface that returns relevant requirements based on selected parameters. People will select their Protection Level, Availability Level, Resource Type, and additional pre-identified parameters to generate a list of applicable requirements. The list must be able to be saved in a usable form.

We are seeking a skilled Rails developer who is experienced with CAS authentication for a multi-month assignment. Work will be conducted offsite with regular Zoom meetings required for requirements gathering as well as conducting design and prototyping sessions.

The developer will report to the Information Security Policy Program Manager, and will work closely with ISO Developers and Accessibility subject matter experts. Expectations The developer must be experienced with Rails and CAS integration and will be expected to perform the following tasks independently with input from team members and oversight and coordination provided by the InfoSec Policy Manager.

Responsibilities

• Create a database of the campus Minimum Security Standards with an administrative UI to allow maintenance
• • The Admin UI must require CAS authentication for admin access
• • The Admin UI must be available to authorized admins only
• • A google sheet/spreadsheet will be provided with the relevant data
• • “Maintenance” includes the ability to update the database as policy requirements evolve
• Create a public-facing end-user UI that meets accessibility requirements (currently WCAG 2.0, preferably WCAG 2.2).
• Users must be able to:
• • Enter/select a Protection Level, Availability Level, IT Resource Type, requirement priority level, and requirement detail level to generate a list of applicable requirements
• • Export or save the generated list of requirements in a human-readable, manipulatable format, such as a Google sheet, Excel, PDF, or checklist (other options can be considered). Ideally, people can choose from more than one option.
• The project must be coded in Rails, have separate prod and test/qa environments, and incorporate basic utilities provided by the internal ISO Developers.
• Document work performed and conduct knowledge transfer sessions with technical teams
• Participate in project team meetings as needed
• Coordinate testing and incorporate feedback
• Address feedback from user acceptance testing/UX reviews and accessibility reviews and make final adjustments
• Work with the production support team to implement and deploy
• Initial post deployment support, if needed
• Anticipated deliverables may include, but are not limited to the following:
• A functioning, accessible, Rails application with a public end-user interface, CAS authenticated administrative UI for maintenance, and separate prod and test/qa environments, per the above expectations
• Technical Documentation
• Accounting of hours spent on the project