Digital Senior Platform & Identify Engineer

Location: China - Pudong

Remote Type: This position is a hybrid of office/remote working

Time Type: Full time

Job Description

Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

• As the Alibaba Cloud Platform Tech Lead, you will own the technical direction, design, and operation of Castrol China's secure, scalable, and resilient Alibaba Cloud Landing Zone.
• Working within a high-performing Agile engineering squad, you will set engineering standards, drive Infrastructure-as-Code automation, and lead the delivery of centrally managed, federated cloud platform services that enable business innovation and operational excellence for Castrol China workloads.
• You will work closely with architects, application squads, security teams, programme delivery teams, and global cloud leadership to engineer environments that are secure, cost-effective, highly available, and aligned with Alibaba Cloud best practices

Key Accountabilities

• Provide technical leadership for the Alibaba Cloud Landing Zone: multi-account architecture, Resource Directory (RD) governance, and the federated application-account operating model.
• Design, build, implement, and support enterprise-scale Alibaba Cloud platform services and shared foundations.
• Develop and maintain Terraform Infrastructure-as-Code, delivered via GitLab CI/CD pipelines, to automate provisioning and enforce standardisation.
• Design and manage Alibaba Cloud networking, and connection to Castrol enterprise network.
• Implement and manage centrally governed security across accounts: Cloud WAF, Cloud Firewall, Anti-DDoS, etc.
• Implement and manage logging, monitoring, auditing, and observability.
• Ensure cloud solutions comply with security, governance, risk, and regulatory (GRC) requirements, including China data-residency obligations.
• Implement identity and access controls using RAM users/roles, cross-account RAM, resource-level policies, aligned to least-privilege / Zero Trust principles.
• Manage platform dependencies, connectivity, identity, and monitoring during transition and separation activities, minimising operational disruption.
• Support ACK (Kubernetes) platform operations, including pod, connectivity, routing, and troubleshooting.
• Identify and mitigate infrastructure risks, ensuring service continuity for mission-critical production workloads.
• Conduct code reviews, define engineering standards, and mentor engineers to raise platform adoption and engineering maturity.
• Troubleshoot and resolve complex platform, networking, and security issues across multiple accounts and regions.
• Administer and maintain Active Directory Domain Services (AD DS) and Microsoft Entra ID environments for China
• Manage identity lifecycle, authentication services, and access governance controls.
• Implement and maintain secure IAM solutions including MFA, Conditional Access, RBAC, and PIM.
• Monitor platform health, investigate incidents, and ensure compliance with security standards.
• Collaborate with infrastructure, security, platform, and application teams on identity-related projects.
• Monitor and analyze security events and alerts from SIEM, AliCloud, and identity platforms.
• Partner with Global Digital Security teams to conduct security assessments for new applications, platforms, and technology solutions intended for China deployment.

Job Holder Requirements

Education

• Bachelor or higher degree in Computer Science, IT, Engineering, or related discipline, or equivalent professional experience.

Preferred Certifications

• Alibaba Cloud Certified Professional / Expert (ACP / ACE) – Cloud Computing / Cloud Security
• (Desirable) Additional cloud security or Kubernetes (CKA/ACK) certification
• (Desirable) ITIL Foundation

Experience

• >5 years within IT, Infrastructure Engineering, or Cloud Engineering.
• >2 years hands-on Alibaba Cloud (or equivalent) platform engineering, ideally in a lead/senior capacity.
• Demonstrated success implementing automation, security controls, cloud governance, and platform standardisation.
• Experience leading cloud migration, separation, or integration.
• Experience supporting mission-critical production environments and driving continuous improvement.
• (Desirable) Experience in a digital-led transformation environment or modern IT operating model.

Desirable

• Experience working in a digital-led transformation environment or IT operating models

Skills and Competencies

• Designing, implementing, and operating Alibaba Cloud environments.
• Coding skills, delivered through DevOps CICD.
• Strong scripting/automation using Python, Bash, and CLI.
• Experience implementing cloud security best practices.
• Experience with monitoring and logging.
• Understanding of cloud cost optimisation and FinOps principles.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent stakeholder management and written/verbal communication skills.

Travel Requirement

No travel is expected with this role

Relocation Assistance:

This role is not eligible for relocation

Remote Type:

This position is a hybrid of office/remote working

Skills:

Cloud Platforms, Cloud Platforms, Collaboration, Communication, Configuration management and release, Continuous deployment and release, Creating a high performing team, Database Design, Digital Project Management, Documentation and knowledge sharing, Emerging technology monitoring, Facilitation, Information Security, Mentoring, Metrics definition and instrumentation, NoSql data modelling, Problem Solving, Relational Data Modelling, Risk Management, Scripting, Secure development, Service operations and resiliency, Software Design and Development, Solution Architecture, Source control and code management {+ 5 more}

Legal Disclaimer:

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.