Security Engineer

As a senior member of IAME team you will be expected to lead and assist in the delivery and management of the on-premise Swift Secrets Management Service (HashiCorp Vault - Enterprise edition), tools, processes, and technologies including but not limited to:

Assist application team(s) with onboarding digital secrets to the Secret Management including reviewing environment for authentication method, secrets engine to onboard secrets, assist in developing compliance reporting, policy review/enforcement, end to end lifecycle management activities

Work with team to expand services and visibility by continuing to review offering, speaking with stakeholders and assisting new application teams to adopt and automate

Develop regular reporting and accountability on key metrics and agreed upon deliverables and ensure that the team is performing according to them

Working with the vendors' delivery teams, maintaining a detailed design, request the pre-requisites and deploy the selected solutions in a highly available, resilient and secure configuration. Ensure the solution is integrated with all the Swift ecosystems (MS-AD, monitoring, backup, SIEM, ...)

Assist with the Operational readiness for the solutions

On-call on a rotational basis

Be able to design required solutions based on the business requirements of customers.

Help leading engineers to achieves the policies and objective set by senior management

Translate senior management policies into implementable requirements document for engineering

Knowledge of Zero Trust Architecture in IAM realm, specifically in non-human identities strategy

Project name : SSMS / Hashicorp Vault Enterprise

Experience in Engineering/Operating solution in full HA across multiple data centers

Experience with HashiCorp Vault Enterprise edition

Experience on 'Infrastructure and Configuration Management as Code' (Terraform)

Experience with DevOps and DevOps tooling (Jira, Git, Jenkins, etc.)

Experience with Python

Experience with REST-API

Experience with scripting (example bash) to help automate day-to-day tasks

Experience with SELINUX

Experience with Splunk and Splunk Query Creator

RHEL 8 System Administration

RHEL 9 System Administration

Experience with leading a team and segregating tasks

Solution architect experience