Senior DevOps Engineer

• Lead the design and implementation of secure, automated CI/CD pipelines
• Implement Infrastructure as Code using tools like Terraform or Ansible
• Automate security scanning, compliance checks, and vulnerability management within development workflows
• Drive adoption of DevSecOps best practices
• Collaborate with production support team to resolve production incidents
• Provide technical expertise during incident response
• Work closely with production support and application teams
• Partner with the operation resilience project team
• Coordinate with global and regional SRE and DevOps teams
• Ensure compliance with China's regulatory requirements
• Implement secure coding practices
• Conduct regular security assessments
• Deploy and maintain monitoring tools for system observability
• Develop dashboards and alerts for proactive issue detection
• Optimize CI/CD pipelines
• Collaborate with SRE teams
• Lead and mentor a team of DevSecOps engineers
• Provide training and guidance on tools and practices.

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field
• Advanced degrees or certifications (e.g., AWS Certified DevOps Engineer, CISSP, CISM) are a plus
• Minimum of 7 years of experience in DevOps, DevSecOps, or related roles, with at least 3 years in a leadership or senior engineering role
• Proven experience in automating CI/CD pipelines and implementing security practices in a financial services or banking environment
• Experience supporting production support teams during incidents, with a focus on rapid resolution and root cause analysis
• Familiarity with coordinating with global/regional SRE and DevOps teams in a distributed environment
• Expertise in Jenkins, GitLab CI, GitHub Actions, or CircleCI for building secure, automated pipelines
• Proficiency in Terraform, CloudFormation, or Ansible for automated infrastructure provisioning
• Deep knowledge of AWS, Azure, or GCP for managing secure, scalable infrastructure
• Knowledge of Ali Cloud would be an advantage
• Experience with Docker, Kubernetes, or Helm for secure containerized deployments
• Proficiency in Snyk, SonarQube, Aqua Security, or Checkmarx for vulnerability scanning and code analysis
• Familiarity with HashiCorp Vault, AWS Secrets Manager, or similar for secure key management
• Expertise in Prometheus, Grafana, Splunk, or Datadog for observability and security monitoring
• Strong skills in Python, Bash, or Go for automation and tool development
• Knowledge of TCP/IP, load balancing, and firewalls for secure system connectivity
• Proficiency with Git for managing code and infrastructure changes
• Excellent verbal and written communication skills in English and Mandarin
• Ability to explain complex technical and security concepts to non-technical stakeholders
• Strong problem-solving skills
• Leadership and mentorship abilities
• Proactive mindset
• Willingness to participate in on-call rotations
• Ability to work across time zones
• Strong understanding of banking systems and compliance with local and global regulations.

Knowledge of Ali Cloud

• Flexible working
• Continuous professional development
• Opportunities to grow within an inclusive and diverse environment.