Development Consultant - Network policies

Task: The scope of services includes the following tasks, which are independently performed by the external consultant:

- Creation of a design document for the implementation reviewed and approved by Uniper Implement Process Integration between Tufin Kubernetes Network Security Module and Development Repository using Tufin REST APIs that meets the following requirements

° Namespace Owners must be able to switch on learning mode for a cluster for a configurable time (up to 60 minutes)

° Several Namespace Owners must be able to switch on Learning Mode in parallel

° Learning Mode is automatically switched off when no Namespace Owner has switched on Learning Mode

° When the configured Learning Mode interval for a namespace has ended a namespace specific network policy is generated and pushed to a predefined Git Repository

° A namespace owner can define a Git repository and branch to which generated network policies in yaml format can be pushed

° Access tokens to push network policies to the git branch must be stored securely

° Network policies that are already configured in the namespace should not be discovered again

In the design document, Uniper expects to find a detailed description of the application architecture, the installations process and operations manual. The document will be sent to Uniper via mail and signed off or rejected until finished- Implementation of the design in a suitable programming language (preferably Java, to be determined in the design document). The consultant write source code, test it and check it into a version control system (implementation and design are well-known and precise terms in conjunction with software development)

- Maintain source code in Uniper Version Control System (Azure DevOps) for the implementation on a continuous basis. Access to a suitable repository will be provided by Uniper

-Configuration of a CI/CD pipeline in Azure DevOps for automated build and deployment to a suitable runtime environment (defined in the design document)

- Knowledge transfer of the application architecture, the operations details of the software and the installation process and Handover to Uniper line organization. The knowledge transfer will be organized by Uniper. The knowledge will be conducted as Microsoft Teams sessions. The handover consists of going through the existing documents, clarifying open questions. Afterwards the handover will be signed off by Uniper- Project Closure documentation. The consultant prepare a checklist of all activities planned including completion date, present it to Uniper and Uniper sign-off