Cybersecurity Lead Cloud Infrastructure & Site Reliability Engineer

ABOUT THE ROLE

Are you looking for an opportunity to advance your tech career? Interested in creating next-generation cybersecurity and analytics capabilities? If you are, then apply to join HSBC’s Cybersecurity Science & Analytics (CSA) team. We use our award-winning advanced analytics platform to develop innovative products for securing one of the largest technology estates in the world.    

CSA are a unique and multi-skilled team of cybersecurity scientists, data and analytics professionals, and engineers. Our mission is to harness the power of data, analytics, AI/ML, and cybersecurity science to innovate and advance HSBC’s cybersecurity capabilities.

The Lead Cloud Infrastructure & Site Reliability Engineer will form part of the CSA Platform & Data Engineering Team, joining a global team of data technology professionals to deliver critical analytics engineering requirements for the strategic cybersecurity data lake and analytics platform.

The position is a mid-senior technical, hands-on delivery role, requiring knowledge of data engineering, cloud infrastructure and platform engineering, platform operations and production support.

YOUR RESPONSIBILITIES

• Operate and enhance the strategic cybersecurity data lake and advanced analytics platform in Azure cloud.
• Build and manage CSA Azure platform to enable application deployments. Engineer solutions on the Azure platform using Infrastructure-as-Code methods (e.g., Terraform).
• Manage Azure connectivity and networking e.g., Express Route, DNS, IP allocation and traffic routing, Network Security Gateways (NSG) and Azure Firewall.
• Gather requirements and ensure continuous feedback loops between CSA and the wider Azure Cloud Services team. Provide maintenance and run support for landing zones/cloud workspaces operated on behalf of Cybersecurity teams. Ensure reliable and resilient services that comply with applicable controls and regulations, meet stakeholder functional and non-functional requirements, and operate within cybersecurity's risk, cost, and quality tolerances. 
• Execute the functional pattern lifecycle process within the code library (design, document, develop, and maintain). Ensure compliance with operational risk management standards (e.g., Network, Firewall, OS, Logging, Monitoring, Availability, Resiliency).
• Integrate, configure, deploy, and manage centrally provided common cloud services e.g., identity and access management (IAM), networking, monitoring, operating systems, containers.
• Build and support continuous integration (CI), continuous delivery (CD) and continuous testing activities.
• Update support and operational documentation as required. Fault-find and support CSA delivery teams building applications within the data platform. Day-to-day troubleshooting and support of the CSA Azure tenant/infrastructure.

SKILLS & EXPERIENCE WE REQUIRE

• Cloud Infrastructure experience. Ability to build, operate, maintain, and support cloud infrastructure & data services at scale. Experience of engineering and deploying a range of Services in Azure. Experience in dealing with multiple support groups that contribute to a Service. Experience working with highly available/high-load web infrastructure e.g., web proxies, reverse proxies.
• Platform Engineering experience. Data Quality, Data Management, Data Controls & Data Governance knowledge. Security and Compliance, e.g., IAM and cloud compliance/auditing/monitoring tools. Troubleshooting/service support experience. A track record of constantly looking for ways to do things better and an excellent understanding of the mechanisms necessary to successfully implement change. Demonstrated experience troubleshooting complex problems, especially those resulting from interactions across a cloud, services, and application stack. Strong documentation, change management, and agile development ethos.
• Programming skills. Ability to script (Bash/PowerShell, Azure CLI), code (Python, C#, Java), query (SQL, Kusto query language) coupled with experience with software versioning control systems (e.g., GitHub) and CI/CD systems. Programming experience in the following languages: PowerShell, Terraform, Python Windows command prompt and object orientated programming languages.
• Software & Network Principles knowledge. Experience with SRE and Azure DevOps. Demonstrable experience of Linux administration and scripting (preferably Red Hat Systems). Understanding of hardware and software principles and storage technologies (SSD, HDD, NVMe), CPU architectures, and Memory & Operating system principles (especially network stack fundamentals). Understanding of network protocols and network design.
• Experience with server, operating system, and infrastructure technologies such as Nginx/Apache, CosmosDB, Linux, Bash, PowerShell, Prometheus, Grafana, Elasticsearch).
• Experience with Infrastructure-as-Code and Automation tools such as Terraform, Chef, Ansible, CloudFormation/Azure Resource Manager (ARM).
• Knowledge of streaming platforms such as Azure Event Hubs or Kafka, and stream processing services such as Spark streaming.
• Experience with Security Information & Event Management (SIEM) and Security Orchestration, Automation & Response (SOAR) technologies, especially cloud based, is a significant asset.

WHAT WE OFFER

• Competitive salary
• Annual performance-based bonus
• Additional bonuses for recognition awards
• Multisport card
• Private medical care
• Life insurance
• One-time reimbursement of home office set-up (up to 800 PLN).
• Corporate parties & events
• CSR initiatives
• Nursery discounts
• Financial support with trainings and education
• Social fund
• Flexible working hours 
• Free parking (Cracow office)