System Engineer, IAM Authentication and Authorization, Core Engineering, Analyst/Associate, Shanghai

Location: Shanghai, Shanghai, China

ABOUT THE ROLE 

Core IAM Authentication and Authorization Engineering within Core Engineering is responsible for providing an opinionated, standardized set of tools and services to enable building, improving and maintaining of secure applications platform at the firm to focus on authentication and authorization for modern financial technology applications. 

We are seeking a skilled Dev(Sec)Ops backgrounded Engineer to join our team. The ideal candidate will have extensive hands-on experience in system administration and software development on authentication and authorization related systems and/or modern identity management and control systems, and experience in project implementation. This role requires practical expertise and a proven project experience in managing and delivering real-world solutions. 

Are you a systems engineer or security engineering specialist who is enthusiastic about the challenges in IAM area and able to provide reliable, highly available services? If you are passionate about system operation automation, system authentication and authorization management, and good at solving complex challenges to make things happen in real world, we would love to hear from you.

 

How will you fulfill your potential?

• Work with a global team of highly motivated and talented platform engineers and software developers delivering solutions specializing in a range of technologies to integrated architectures for secure, scalable infrastructure services serving a diverse set of internal and external use cases
• Partner with colleagues from across technology and risk to ensure an outstanding, useable and unobtrusive experience for owners and users of IAM authentication and authorization control related business.
• Help to provide frictionless integration with the firm’s runtime, deployment and SDLC platform technologies, manage integration, testing, release and demise of system/software products supporting based on business growth objectives and risk control requirements
• Help to communicate and promote best practices for IAM engineering, engage in quality control in non-production and production environments

 

Basic Qualifications 

• 3 to 8 years of technical experience in software engineering and system engineering space 
• A strong grounding in security concepts, including core cryptography, secure coding practices and principles of authentication
• A good understanding of X.509, key exchange protocols, and authentication protocols and identity management
• Experience deploying and supporting software across the full Continuous Delivery life-cycle
• Sound SDLC and practices and tooling experience - version control, CI/CD and configuration management tools
• Experience monitoring, measuring, auditing and supporting software products, proven hands-on experience in DevSecOps or relevant roles, with expertise in workflow automation, security integration, and production-grade solutions
• Solid problem-solving logical thinking and skills, including hands-on troubleshooting and root cause resolution
• Proficiency in at least one programming or scripting languages: Java, Python, Golang, PowerShell, BASH scripting
• Solid understanding of ITIL concepts, with hands-on knowledge of change management, incident management, demonstrated strong awareness and practical handling of system change risks 
• Proven success in IT project management and implementation, with tangible outcomes and project deliverables
• Strong English communication skills, ability to communicate technical concepts effectively, both written and orally, as well as interpersonal skills required to collaborate effectively with colleagues across diverse technology teams

 

Preferred Qualifications

• Ability to report on trends, perform gap analysis, perform risk analysis and provide recommendations to continuously improve the environment
• Experience with containerization - Kubernetes/Docker, fair knowledge on SSO e.g. OIDC Authentication
• Familiar with data security regulation and compliance standards, with a solid understanding of sensitive data encryption and de-indentation technique would be a plus.
• A calm and composed demeanor, high levels of patience and tolerance in patient, especially when addressing complex or time-sensitive challenges with the ability to maintain focus under pressure, ability to work collaboratively across teams and functions with a proactive approach

 

ABOUT GOLDMAN SACHS

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html
 

© The Goldman Sachs Group, Inc., 2023. All rights reserved.

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.

Are you a systems engineer or security engineering specialist who is enthusiastic about the challenges in IAM area and able to provide reliable, highly available services, with a minimum of 3 years' engineering experience? If you are passionate about system operation automation, system authentication and authorization management, secrets management, and good at solving complex challenges to make things happen in real world, we would love to hear from you.