Deutsches Elektronen-Synchrotron DESY·March 08, 2026

DESY seeks expert services to enhance the security posture of the TANGO Controls framework. Firstly, the Contractor shall provide the conception, implementation, and quality assurance of TLS encryption into TANGO core. Second, the contractor will design and deploy a prototype of client-server authentication and authorization framework by transitioning a recent community prototype into a production-ready system featuring role-based access control (RBAC). The emphasis of the required job lies in addressing the current lack of built-in security components in TANGO. Within the framework of this development, the following support and consulting services are required: • The Contractor prepares a technical design report and engineering plan for Transport Layer Security encryption that is to be presented to the TANGO core developers and the steering board. This document is to be co-developed with DESY staff. • The Contractor designs an authentication and authorization framework (RBAC) prototype • Implementation of the proposed solution must be performed under supervision of the TANGO kernel group, according to TANGO Collaboration standards regarding development languages (C++, Python), frameworks, and agile processes. • The Contractor shall furthermore perform software-technical analyses, performance optimizations, complex error analysis (debugging), and provide technical consulting for long-term architectural decisions. • The Contractor also must provide a conceptual prototype of a Public Key Infrastructure (PKI) for certificate management. All further information can be found in the procurement documents.

Los 1: Cyber Security: Implementation of TLS and prototypic Client-Server Authentication in TANGO Los 2: Legacy Code Audit, Refactoring and Modernization of TANGO Core Los 3: Improvement of TANGO documentation