Senior DevOps Engineer
Project description
About Corporate Bank Technology Corporate Banking is a technology centric business, with an increasing move to real-time processing, an increasing appetite from customers for integrated systems and access to supporting data. This means that technology is more important than ever for the business. Our Corporate Bank Technology team is a global team of 3000 coders (and growing!) across 30 countries. The primary businesses that Corporate Bank support are Cash Management, Securities Services, Trade Finance and Trust & Agency Services. CB Technology support these businesses through CIO aligned teams and also by 'horizontals' such as Client Connectivity, Surveillance and Regulatory, Infrastructure, Architecture, Production, and Risk & Control. About Surveillance & Regulatory Surveillance and Regulatory Technology is part of Corporate Bank Technology and responsible for delivering solutions that protect the bank's financial and reputational interests from potentially criminal or inappropriate behaviour by our clients, employees, vendors. It enables the bank to manage its compliance to regulations and the risk appetite to stay in business in the various legislation. In addition, the function, is responsible for driving improvement across the IT delivery cycle through adoption of best practices, automation tooling and metrics, as well as developing a target state DevOps capability. Application: db-SIS db-SIS is the front gate into the Surveillance Domain and the glue between all the Surveillance Controls that analyze the transactions. This is the place where it is decided, which Surveillance Controls need to be run and where the analyses are being consolidated into one final decision. Big amounts of data (millions of messages per day) need to move fast (some as fast as 200ms) and reliable. Data loss is not an option and self-healing is mandatory.
Responsibilities
- We are looking for a DevOps engineer to help us build and maintain the db-SIS (Surveillance Insulation Services) infrastructure and CI/CD pipelines and apply DevOps best practices to ensure stable, secure and frequent deliveries to production. Our engineers are responsible for configuring and updating everything related to the underlying system, using infrastructure as code, deploying the application's micro-services in different environments, making sure that deployed services run correctly. db-SIS is currently hosted in a private datacenter, with infrastructure based on Red Hat OpenShift, using Jenkins for CI/CD and an internally developed framework, which supports the full pipeline - build, test, compliance, governance and deployment. It also has a footprint in GCP, using GKE, based on sources and workflows hosted in Github. Some, but not all, of the tools & technologies we are working with: - Red Had OpenShift, GKE - Helm - Jenkins, Github actions - Bash, Groovy - Bitbucket, Github Enterprise - Terraform Enterprise Key Responsibilities:
- Add the glue between application code and infrastructure (deploy-ability)
- Keep infrastructure and CI/CD code up to date
- Apply required compliance and governance to and with IaaS & CI/CD code
- Build and maintain the db-SIS CI/CD pipelines
- Maintain and develop the internal scripts/Github actions library (bash, Groovy)
- Promote a DevOps/SRE culture and modern toolchains to support continuous delivery.
- Configure and maintain observability (logging and monitoring) for deployed applications
SKILLS
Must have
- In order to embark on this journey, you need: - Hands-on experience with container orchestration tools (Kubernetes, OpenShift, etc) - Hands-on experience with Jenkins and/or Github actions - Good knowledge in Bash and ideally Groovy - Some experience with the Java programming language and build tools (Gradle, Maven) - Basic Linux administration - Git - Infrastructure as code (Terraform) - Rest APIs (for integration with other platforms as part of the CI/CD) - Some experience with helm
Nice to have
Nice to have: - Experience with any of the public cloud providers (GCP, MS Azure, AWS) - Networking knowledge (IP, subnets, CIDR, HTTP) - Experience with at least one messaging or streaming technology - MQ, Kafka - Experience working with transactional databases (SQL) - TLS certificates knowledge - BDD frameworks (ex. Cucumber)
