Senior IT Infrastructure and Security Engineer

Що робити

• Software testing and acceptance: Review and accept the software developed by third-party providers, ensuring compliance with set technical, functional and security requirements. Testing and validation of the software (security, vulnerability, functional). Proper documenting of testing and acceptance results.
• Cybersecurity: Assist in developing cybersecurity strategy. Development of threat landscape. Assistance in implementing cyber-related BCP tests.
• Identity and access management: operate the full joiner/mover/leaver lifecycle: create, modify and deactivate accounts on documented, approved requests only; enforce least privilege and need-to-know; administer MFA and the corporate password manager; run periodic access recertifications with system owners.
• Network and remote access: administer network segmentation, IPSec appliances and direct-connect gateways; keep secure remote access reliable for a distributed team.
• Systems and applications: patch systems and applications against known vulnerabilities; track vendor advisories; administer the cloud-hosted core banking application landscape across multiple availability zones; coordinate application-level fixes with our software maintenance partner; support periodic penetration tests and drive remediation.