Cloud Security Engineer

SUMMARY:
An industry leading Bank has an exciting opportunity available for a Cloud Security Engineer to join their dynamic team.

POSITION INFO:
Purpose Statement
To provide cloud security expertise to build out and maintain resilient, scalable, cost effective and high performing Cloud solutions that will assist them to become the best bank in the world.

Key Performance Areas

1. Cloud Security Focus
2. Design and build Infrastructure Solutions
3. Implement Infrastructure Designs
4. Maintain infrastructure

• Apply cloud security know how to assist in constructing and developing the roadmap pertaining to Cloud technology.
• Drive innovation by remaining current with cloud and cloud security technologies to enhance products & services offerings to the organisation.
• Engage with multiple business units on planned Cloud deployments and investigate deployment and configuration best practices and architectures, focusing on security.

• Engage with vendors / suppliers / business partners for the design and implementation of cloud security solutions as needed.
• Design and build out new cloud security solutions that meet the technical requirements and align with, but not limited to:
• Information security and governance frameworks
• Regulatory compliance
• High availability strategy
• Scalability and capacity planning

• Apply cloud security technical know-how to:
• Create detailed planning and implementation documentation, enhancing current standards and quality.
• Prepare hand-over documentation and document support processes to stakeholders.

• Maintenance of the cloud security infrastructure environment through executing and being responsible for various tasks:
• Automating cloud security deployments and testing.
• Document Standard Operating Procedures (S.O. P’s) and upkeep of general documentation.

• 7+ years’ experience in Infrastructure, Software Development, DevOps or Security
• 4+ years design and implementation of highly available, enterprise-scale public Cloud infrastructure.
• 3+ years in AWS with focus on Security & IAM
• Introducing cloud security technology (start-up) in an environment – processes, principles etc.
• Design and hands on troubleshooting background on AWS Platform (Azure or GCP will be advantageous).
• Experience working in a DevOps environment.
• Experience developing and supporting infrastructure and cloud security capabilities for micro services-based architectures.
• Experience working with CI/CD tools.
• Experience with authentication and Authorization technologies and protocols (LDAP, Kerberos, AD, OAuth 2.0, OpenID Connect, SAML).
• Experience working with scripting and provisioning tools like Terraform, Ansible, CloudFormation or equivalent.

• 2+ years in AWS with focus on Networking
• Experience in a financial services or banking organisation
• Infrastructure security
• Experience in engineering data pipelines using Big Data technologies such as Spark, Kafka, Hadoop, Storm, etc.
• Experience with ELK, New Relic or similar on Public Cloud Platforms.
• Experience with Docker and Kubernetes.
• Experience working in a fast paced Agile/Scrum environment (Atlassian Stack).

• A relevant tertiary qualification in
• AWS Foundation or
• Cloud Computing

• Bachelor's Degree in
• Information Technology or
• Engineering - Other

• Basic understanding of at least one high-level programming language (GoLang / .net / Java)
• Advanced scripting skills in at least one interpreted language (Bash/PowerShell)
• Design and deployment of highly available, enterprise-scale Cloud infrastructure.
• Advance knowledge of infrastructure concepts, technologies and patterns. (SDLC, IaC)
• Practical, working knowledge of:
• Developing and delivery systems on AWS Platforms (Azure or GCP will be advantageous).
• Supporting and enhancing build and release processes through automation using a combination of processes and existing tools.
• Understanding of Cloud Security technologies and best practices.
• Understanding of Networking in Cloud environments.

• Previous experience in a DevOps role and incorporating security controls in the build process.
• Experience in engineering data and/or security log pipelines using Big Data technologies such as Spark, Kafka, Hadoop, Storm, etc.
• Understanding of modern software engineering patterns, including those used in highly scalable, distributed, and resilient systems.
• Ability to deliver long-term, repeatable IaC solutions that incorporate directly into an overall CI/CD process.
• Knowledge of JSON templates, PowerShell, CLI’s, Shell, Python.

• Care and passion for our people (Departmental Contributor)
• Earn and extend trust (Departmental Contributor)
• Simplify and make it easy (Departmental Contributor)
• Drive innovation mindset (Departmental Contributor)
• Lead with the "Why" (Departmental Contributor)
• Attract and relentlessly develop people (Departmental Contributor)
• Make decisions - faster and smarter (Departmental Contributor)
• Inspire optimism and persistence (Departmental Contributor)