Engineer, CSS PET - Data Security SRE

We are seeking a Technical Engineer who has experience in cyber security domains with focus on cryptography for enterprise and cloud, and a strong foundation in business logic skills. The ideal candidate will have 5-7 years of experience in information security tools such as nCipher/Luna HSMs, PayShield, CipherTrust Manager, Fortanix, and AWS Cert Manager.

Key Responsibilities:

• Responsible for configuring, maintaining, troubleshooting, and enhancing the security tools platform mainly for encryption and tokenization within the Data Security function in the bank.
• Responsible for identification, assessment, and resolution of incidents/change requests within SLA and recurring problem management.
• Proactively monitor and maintain the tool platform.
• Accountability for tools technology refresh, system upgrades, and project implementation within BAU support scope.
• Obsolescence and estate hygiene management.
• Liaise with vendor and engineering teams where required to address technical issues with the tools.
• Ability to self-direct and work independently when necessary, and clearly articulate technical concepts/issues to both technical and non-technical peers and management.
• Contribute to overall supported tools process improvements and documentation.
• Able to perform system administration operational duties, which will require non-traditional working hours.
• Perform user acceptance testing and obtain signoff.
• Adopt DevOps and industry standards and practices for security production support.

Strategy:

Adhere to SCB Strategy.

Business:

Good stakeholder management.

Processes:

Adhere to SCB Processes.

People & Talent:

Should be a good team player.

Risk Management:

To perform continuity management.

Regulatory & Business Conduct:

• Display exemplary conduct and live by the Group's Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines, and the Group Code of Conduct.
• Effectively and collaboratively identify, escalate, mitigate, and resolve risk, conduct, and compliance matters.

Key stakeholders:

• Product team and end-users within the bank.
• Support leads within ICS-CST.
• Other relevant functions within Technology Services including Infrastructure Services (Database, Network, and Platform).

Skills and Experience:

• IT standards, procedures, and policies.
• Platform (UNIX, Linux, and Windows) and network.
• Encryption technologies and HSM services.
• Any data security product (Protegrity, Thales, Vormetric, Fortanix, MS PKI, AppViewX, Venafi, AWS Cert Manager, etc.).
• ADO.
• Shell and Python scripting language.

Qualifications:

• 5 to 7+ years of IT experience. Banking domain is desirable.
• Knowledge of operating systems Unix/Linux/Windows technologies.
• Basic understanding of network and firewall.
• Good understanding of ITIL practices and ITSM tools.
• Excellent track record in running complex platform support environments.
• Supported change management and incident management functions.
• Highly motivated, results-driven, and able to multi-task.
• Excellent communication and interpersonal skills, and able to work well with cross-organizational teams/individuals.
• Strong sense of personal ownership and responsibility in accomplishing the organization's goal.
• Confident and willing to roll up his/her sleeves to drive success.
• Proven experience in coordination of many dependencies and multiple demanding stakeholders in a complex, large-scale deployment environment.
• Advanced documentation skills to ensure that the knowledge repository is up to date.
• Fundamental analytical and conceptual thinking skills.

Required Skills:

• Proficiency in encryption technology topics such as encryption, tokenization, key management, public key infrastructure design and setup, certificate lifecycle management, data leakage, and HSM services.
• Strong theoretical knowledge of encryption and tokenization technologies.
• Experience with various operating systems like Windows, Unix, and Linux, and understanding of LAN, WAN, and firewall.
• Strong engineering background and comfort with at least one scripting language, understanding of REST protocols, and experience in integrating tools to provide a unified solution set.
• Strong understanding of enterprise data lifecycle, data flows and design, security principles, computing infrastructure, data topology, and crypto lifecycle.
• Experience with version control using Git and Azure ADO.
• Experience in scripting/automation frameworks.

Preferred Skills:

• Good understanding of ITIL practices and ITSM tools.
• Develop documentation, workflow diagrams, and test scripts.
• Develop the creation process of new audit reports, templates, ad-hoc reports, and run current audit reports.
• Identify risks and issues and develop recommendations that address significant risks and complex issues.
• Proven experience in coordination of many dependencies and multiple demanding stakeholders in a complex, large-scale deployment environment.
• Identify and communicate high-level gaps and issues in primary functional area.
• Participate in production support, especially on the most complex issues.
• Collaborate with stakeholders on root cause and help drive mitigation or elimination actions for future incidents.