Principal Accountabilities:
Cloud Infrastructure & Platform Engineering / Platform Operations & Production Support
§ Operation and enhancement of the strategic cybersecurity data lake and advanced analytics platform in Azure cloud.
§ Build and manage CSA Azure platform to enable application deployments.
§ Engineer solutions on the Azure platform using Infrastructure-as-Code methods (e.g., Terraform)
§ Manage Azure connectivity and networking e.g. Express Route, DNS, IP allocation and traffic routing, Network Security Gateways (NSG) and Azure Firewall.
§ Gather requirements and ensure continuous feedback loops between CSA and the wider Azure Cloud Services team.
§ Execute the functional pattern lifecycle process within the code library (design, document, develop, and maintain).
§ Integrate, configure, deploy, and manage centrally provided common cloud services e.g. identity and access management (IAM), networking, monitoring, operating systems, containers.
§ Build and support continuous integration (CI), continuous delivery (CD) and continuous testing activities.
§ Providing maintenance and run support for landing zones/cloud workspaces operated on behalf of Cybersecurity teams.
§ Ensuring reliable and resilient services that comply with applicable controls and regulations, meet stakeholder functional and non-functional requirements, and operate within cybersecurity's risk, cost, and quality tolerances.
§ Ensure compliance with operational risk management standards (e.g., Network, Firewall, OS, Logging, Monitoring, Availability, Resiliency).
§ Update support and operational documentation as required.
§ Fault-find and support CSA delivery teams building applications within the data platform.
§ Day-to-day troubleshooting and support of the CSA Azure tenant/infrastructure.
Required Skills
The successful candidate will be a student of the Google Site Reliability Engineering (SRE) philosophy as applied to managing large-scale cloud infrastructure, possess skills and experience within one or more of the following areas, and demonstrate a willingness to learn additional skills via certification and/or on-the-job learning where required.
Programming, Software & Network Principles
§ Experience with SRE and Azure DevOps
§ Ability to script (Bash/PowerShell, Azure CLI), code (Python, C#, Java), query (SQL, Kusto query language) coupled with experience with software versioning control systems (e.g., GitHub) and CI/CD systems.
§ Programming experience in the following languages: PowerShell, Terraform, Python Windows command prompt and object orientated programming languages.
§ Demonstrable experience of Linux administration and scripting (preferably Red Hat Systems)
§ Understanding of hardware and software principles and storage technologies (SSD, HDD, NVMe), CPU architectures, and Memory & Operating system principles (especially network stack fundamentals)
§ Understanding of network protocols and network design
Cloud Infrastructure & Platform Engineering
§ Cloud Infrastructure & Platform Engineering (Azure preferred)
§ Cloud Technologies
§ Ability to build, operate, maintain and support cloud infrastructure & data services at scale
§ Experience of engineering and deploying a range of Services in Azure
§ Experience in dealing with multiple support groups that contribute to a Service
§ Experience working with highly available/high-load web infrastructure e.g., web proxies, reverse proxies
§ Data Quality, Data Management, Data Controls & Data Governance
§ Security and Compliance, e.g., IAM and cloud compliance/auditing/monitoring tools
§ Troubleshooting/service support experience
§ A track record of constantly looking for ways to do things better and an excellent understanding of the mechanisms necessary to successfully implement change
§ Demonstrated experience troubleshooting complex problems, especially those resulting from interactions across a cloud, services, and application stack.
§ Strong documentation, change management, and agile development ethos
Technology Stack
§ Technical knowledge and breadth of Azure technology services (Identity, Networking, Compute, Storage, Web, Containers, Databases)
§ Cloud & Big Data Technologies such as Azure Cloud, Azure IAM, Azure Active Directory (Azure AD), Azure Data Factory, Azure Databricks, Azure Functions, Azure, Kubernetes, Service, Azure Logic App, Azure Monitor, Azure Log Analytics, Azure Compute, Azure Storage, Azure Data Lake Store, S3, Synapse Analytics and/or PowerBI
§ Experience with server, operating system and infrastructure technologies such as Nginx/Apache, CosmosDB, Linux, Bash, PowerShell, Prometheus, Grafana, Elasticsearch)
§ Experience with Infrastructure-as-Code and Automation tools such as Terraform, Chef, Ansible, CloudFormation/Azure Resource Manager (ARM)
§ Streaming platforms such as Azure Event Hubs or Kafka, and stream processing services such as Spark streaming
§ Experience with Security Information & Event Management (SIEM) and Security Orchestration, Automation & Response (SOAR) technologies, especially cloud based, is a significant asset
Requirements
Education and Experience:
The successful candidate will possess:
§ Positive attitude, strong work ethic and passion for learning.
§ Bachelor’s degree in Computer Science, Software Engineering, Data Science, or a related field advantageous.
§ Bachelor’s degree in any Science, Technology, Engineering, or Medical (STEM) field accompanied with data, technology and/or programming experience also considered.
§ Applicants without a Bachelor’s degree will be considered if they have demonstrable career experience within one or more of the required areas and/or have relevant industry certifications in Cloud, Data, or Cybersecurity.
§ CSA are a supportive team who welcome candidates from diverse skills and educational backgrounds. Thus, candidates with transferrable skills gained through software development or any other technology background will also be considered.
§ Proficiency in programming languages such as Python, Java, C#, or similar preferred.
§ Experience operating in highly regulated industry, e.g., Financial Services advantageous.
§ Understanding of cybersecurity principles, global financial services business models, regional compliance regulations and applicable laws advantageous.