Security Engineer Junior

Languages*

English

Screening Questions Explain how many years of experience and what you have done with:

Ansible experience (developing roles, playbooks, AWX or Ansible Tower 2 Experience with DevOps and DevOps tooling (Jira, Git, Jenkins, etc.) Experience with Phyton and scripting Experience with Phyton and scripting Go development (especially for Vault plugin) HashiCorp Vault (Open Source) management (deployment/upgrade in HA, troubleshooting, monitoring, hardening, integrations HashiCorp Vault Enterprise management (deployment/upgrade in HA, troubleshooting, monitoring, hardening, integrations Red Hat Linux 7 and 8 system administration (troubleshooting, monitoring, hardening) Red Hat Linux 9 system administration (troubleshooting, monitoring, hardening) SELinux (policy development and troubleshooting) Terraform hands-on experience (module development)

Seeking a IAM Security Engineer with strong expertise in securing and managing enterprise environments. The ideal candidate will have hands-on experience with HashiCorp Vault, Terraform, RHEL, and Ansible, and will be expected to maintain, support and enhance the on-premises Swift Secrets Management Service (= SSMS) that is based upon HashiCorp Vault - Enterprise edition (Vault), tools, processes, and technologies including but not limited to:

• Develop, test and perform OS and software upgrades, prepare for and perform business continuity activities and address vulnerabilities for our Hashicorp Vault Enterprise infrastructures

• Interact with Vendor and Swift internal teams to ensure availability of, maintenance, enhancements to, and integrated with all the Swift ecosystems (MS-AD, monitoring, backup, SIEM, …) of SSMS /Vault infrastructure

• Investigate and resolve issues that impacts or could potentially impact the availability of SSMS and its Vault infrastructure

• Troubleshoot and monitor performance and security of HashiCorp Vault

• Assist application team(s) with onboarding digital secrets to the Secret Management including reviewing environment for authentication method, secrets engine to onboard secrets, assist in developing compliance reporting, policy review/enforcement, end to end lifecycle management activities

• Work with team to expand services and visibility by continuing to review offering, speaking with stakeholders and assisting new application teams to adopt and automate

• Develop and maintain automation workflows using ansible.

• Develop and maintain Terraform modules for secure infrastructure provisioning.

• Enhance and provide regular reporting and accountability on key metrics and agreed upon deliverables and ensure that the team is performing according to them

• Maintain a customer guide that can be reused by the application team(s) for future onboarding actions

• Maintain a runbook for the Secret Management service infrastructure and work with the administrators to maintain and enhance the administrators guide

• On-call on a rotational basis

• On-site presence for at least 2 days a week (Hybrid mode)

Skills

Ansible experience (developing roles, playbooks, AWX or Ansible Tower)

2 Years

Junior (1-3)

Experience with DevOps and DevOps tooling (Jira, Git, Jenkins, etc.)

3 Years

Junior (1-3)

Experience with Phyton and scripting

2 Years

Junior (1-3)

Experience with Phyton and scripting

3 Years

Junior (1-3)

Go development (especially for Vault plugin)

1 Years

Junior (1-3)

HashiCorp Vault (Open Source) management (deployment/upgrade in HA, troubleshooting, monitoring, hardening, integrations

3 Years

Junior (1-3)

HashiCorp Vault Enterprise management (deployment/upgrade in HA, troubleshooting, monitoring, hardening, integrations

1 Years

Junior (1-3)

Red Hat Linux 7 and 8 system administration (troubleshooting, monitoring, hardening)

3 Years

Junior (1-3)

Red Hat Linux 9 system administration (troubleshooting, monitoring, hardening)

1 Years

Junior (1-3)

SELinux (policy development and troubleshooting)

2 Years

Junior (1-3)

Terraform hands-on experience (module development)

2 Years

Junior (1-3)