Sr. Associate Director, Software Engineering

We are currently seeking an experienced professional to join our team in the role of Sr. Associate Director, Software Engineering.

Principal Responsibilities

• Own the day-to-day health, uptime, monitoring, and reliability of services and server infrastructure.
• Collaborate on regular UAT/Production release, w.r.t Release Planning/Review/Tag/Release execution and post health-check.
• Participate in architecture and design reviews to provide recommended improvements to development teams to improve the reliability of applications.
• Minimize manual involvement by implementing continuous security improvements that create a secure operating environment, including developing new security tools, dynamically monitoring for vulnerabilities, alerting on security events, and automated self-healing recovery processes.
• Engage in application performance analysis, system tuning and capacity planning.
• Perform root cause analysis to identify issues and implement continuous improvements to prevent future occurrences.
• Capable of presenting analyses and recommendations to leadership or discussing the technical merits of security solutions with engineers and architects.
• Moderate level of technical complexity experience with multiple integrated applications.
• Engineer secure solutions on foundation platform using Infrastructure as Code (IaC) methods (e.g., Terraform).
• Ensure compliancy with Operational risk and security standards (E.g. Network, Firewall, OS, Logging, Monitoring, Availability, Resiliency).
• Build and support continuous integration (CI), continuous delivery (CD) and continuous testing activities, integrating security tools and automated security checks into the pipeline (e.g., SAST, DAST, CONT, FOSS).
• Develop and maintain security documentation and procedures.
• Mentor other engineers on security best practices.
• Lead incident response activities for security incidents.

Requirements

• Expert understanding of DevOps principles and Infrastructure as a Code concepts and techniques, including security as code.
• Strong understanding of DevOPS/CI/CD and available tools, including Jenkins, Ansible and security testing tools.
• Experienced in full automation and configuration management with a security-first approach.
• Experience building a range of Services in a Cloud Service provider (ideally GCP/Azure]) with a strong security focus.
• Demonstrable Cloud service provider experience (ideally GCP/Azure]) - infrastructure build and configurations of a variety of services including Compute, Storage, Networking, and Security services.
• Experience in containerized solution, e.g., docker/GKE and container security best practices.
• Strong understanding of Security and Compliance, e.g., IAM, cloud compliance/auditing/monitoring tools and security frameworks such as CIS benchmarks, NIST standards.
• Experience in Linux compute system, e.g., file system/schedule system/boot system and essential command with shell.
• Excellent skills in at least one of following: Python, Ruby, Java, JavaScript, Go, Groovy, Scala, with a focus on secure coding practices.
• A track record of constantly looking for ways to do things better and an excellent understanding of the mechanism necessary to successfully implement change with a security mindset.
• A successful track record of delivering complex projects and/or programs, utilizing appropriate techniques and tools to ensure and measure success, as well as making good documentation to record what we have achieved.
• Built effective networks across business areas, developing relationships based on mutual trust and encouraging others to do the same.
• Customer/stakeholder focus. Ability to build strong relationships with Application teams, cross-functional IT, and global/local IT teams.
• Good leadership and teamwork skills - Works collaboratively in an agile environment with DevOps application ‘pods' to provide Cloud specific capability/skills required to deliver the service.
• Operational effectiveness - delivers solutions that align to approved design patterns and security standards.
• A comprehensive understanding of risk management and proven experience of ensuring own/others' compliance with relevant regulatory processes.