Cloud Infrastructure Security Engineer

As a Senior Cloud Infrastructure Security Engineer, you will be leading technical and strategic oversight for the infrastructure security of both public cloud and on-premises cloud.

The role is within the Hybrid Cloud for Cloud Infrastructure Core Products, Services Satellite will be accountable for designing and engineering Infrastructure security solutions across the following domains:

• Cloud Network
• Cloud Enterprise Data Storage
• Cloud Compute
• Cloud Database

Your Key responsibilities

• Leading the delivery of end-to-end infrastructure security solutions in a cloud environment
• Engineering Infrastructure security design, standards, processes, and procedures for the public, private, hybrid cloud environment
• Working with various vendors on infrastructure solutions, performing RFIs, RFPs and POCs
• Improving infrastructure operations through better use of monitoring, cloud coding and scripting best practices
• Automating infrastructure data migration to cloud environments
• Strong fundamental knowledge on Cloud Computing
• Defining the GCP automation principles, developing the framework and setting the standards
• Developing advanced Terraform modules to be used by the SRE and application teams for provisioning and automation of GCP services
• Compiling automations using GCP cloud functions and other native services
• Creating CI/CD pipelines considering build and run time guard rails (e.g. Hashicorp Sentinel and Palo Alto Prisma)
• Curating GCP services across all GCP Infrastructure and Platform families (Database, Storage, Network, Compute, Container technologies, AI, ML, Serverless and Security)
• Providing automation consultancy to Deutsche Banks applications and platform community

Your Skills and Experience

• Experience of Agile project delivery methodologies, such as Scrum or Kanban
• Hands-On experience in cloud platform GCP, AWS, Azure. GCP is preferred.
• Experience in the latest automated testing methodologies and CI/CD processes
• Strong technical skills in evaluating and performing Request for Information (RFIs), Request for Proposals (RFPs) and Proof of Concepts (POCs) in various infrastructure components.
• Strongs understanding of Landing zone Concept.
• Fundamental and thorough understanding of all infrastructure components - platform, database, network and storage
• Good knowledge and understanding of Cryptography, Identity and Access Concepts and Network Security components
• Strong hands-on experience in Cloud Networking, VPC Networks, Cloud Firewall, Hybrid Cloud networking.
• Good knowledge in Cloud Network Security, Zero Trust Model.
• Knowledge and hands-on experience of working with terraform IaC.
• Hands-on Terraform modules development and testing framework
• Hands-on experience on GitHub Operations.
• Demonstrate the ability to work in a team along with other top engineers in the bank
• Excellent communication skills written and verbal
• Demonstrate positive attitude and a sense of urgency in delivery of projects.