DevOps Engineer

About Corporate Bank Technology

Corporate Banking is a technology centric business, with an increasing move to real-time processing, an increasing appetite from customers for integrated systems and access to supporting data. This means that technology is more important than ever for the business.  

Our Corporate Bank Technology team is a global team of 3000 coders (and growing!) across 30 countries. The primary businesses that Corporate Bank support are Cash Management, Securities Services, Trade Finance and Trust & Agency Services.  CB Technology support these businesses through CIO aligned teams and also by 'horizontals' such as Client Connectivity, Surveillance and Regulatory, Infrastructure, Architecture, Production, and Risk & Control.

About Surveillance & Regulatory

Surveillance and Regulatory Technology is part of Corporate Bank Technology and responsible for delivering solutions that protect the bank’s financial and reputational interests from potentially criminal or inappropriate behaviour by our clients, employees, vendors. It enables the bank to manage its compliance to regulations and the risk appetite to stay in business in the various legislation. In addition, the function, is responsible for driving improvement across the IT delivery cycle through adoption of best practices, automation tooling and metrics, as well as developing a target state DevOps capability.

Application: db-SIS

db-SIS is the front gate into the Surveillance Domain and the glue between all the Surveillance Controls that analyze the transactions. This is the place where it is decided which Surveillance Controls need to be run and where the analyses are being consolidated into one final decision. Big amounts of data (millions of messages per day) need to move fast (some as fast as 200ms) and reliable. Data loss is not an option and self-healing is mandatory.

The new db-SIS has been designed and built in an Event Driven style with Kafka as a backbone. At the infrastructure level, it is built and deployed as microservices, running in both a private datacenter over Openshift platform, as well as some components migrated to Google Cloud, in managed Kubernetes clusters.

About the Role - DevOps Engineer

We are looking for another DevOps Engineer colleague in the Surveillance Area to help us with day-to-day activities and GCP migration – CI/CD build and deploy pipelines, configuring and managing the underlying Kubernetes clusters, help application teams with setting up the Helm charts and fixing deployment errors, logging and monitoring, etc.

We need a colleague that is passionate about cloud infrastructure, computer networking, system administration, and technology in general. He/she should be eager to support other colleagues with knowledge and expertise, whether they are more junior or more senior and doesn’t shy away from asking advice.

Currently, we work with the following tech stack: Openshift on private clusters, GCP services, Kubernetes, Postgresql, Github actions, Terraform Enterprise. The application is Java based and uses Gradle for the underlying build and packaging system.

For you to be that colleague you would need the following skills:

• Relevant experience with at least one major CI/CD platform (Jenkins, TeamCity, GitHub Actions, Gitlab, etc)
• Fluent in scripting languages (bash, groovy, etc)
• Hands on experience with Linux operating systems
• Knowledge of working with OpenShift/Kubernetes or other containerization products
• Experience with at least one of the major public cloud providers (GCP, Azure, AWS)
• Good computer networking knowledge (DNS, FQDN, CIDR, TCP/IP, Firewalls, etc)
• Willingness to share your experience and explain your technical decisions to less experience engineers or non-technical colleagues
• Willingness to learn what you don’t know from your colleagues or on your own

We would really love you to know:

• Docker
• Kubernetes
• Helm
• Terraform
• GitHub Actions
• Networking concepts
• GCP

Nice to have:

• Database change management and CI/CD (ex. Liquibase)
• Secure communication concepts (PKI, TLS, CAS, VPN, etc.)
• REST API debugging
• A shift left security approach

Key Responsibilities:

• Make sure all GCP environments are in working order (dev to prod)
• Develop, maintain and optimize the local scrips library and CI/CD pipelines
• Write documentation on newly implemented features and runbooks
• Deploy applications through the environments all the way into Production
• Troubleshoot and debug running application containers
• Support application teams in deploying new components
• Deploy and maintain the infrastructure via Terraform

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.