Operations and Security Engineer

Role overview

Operations and platform support

• Monitor the platform around the clock, respond to alerts, troubleshoot issues, and restore service.
• Handle emergencies inside or outside office hours and turn around client-requested reports.
• Own backups, business continuity, and disaster recovery, and test them.

Security operations

• Patch and harden components, conduct regular vulnerability reviews, and maintain endpoint-protection compatibility.
• Implement access controls including MFA, RBAC, and SSO; encryption; separated development, test, and production environments; signed and verified automation code; file-type whitelisting; and mobile-device restrictions.
• Run security logging, audit logs, and SIEM integration, and protect logs from tampering.
• Secure APIs using gateways, OAuth 2.0, and OWASP API security practices.
• Run incident response, provide immediate notification and an initial report within 24 hours, and maintain documented procedures with SLAs and escalation.

Documentation and reporting

• Write security architecture and API design documents, infrastructure sections of the architecture pack, and bi-monthly operations reports.

Required technical experience

• Administer Linux and Windows servers on public and sovereign clouds, including GCP, OCI, Deem, or similar.
• Administer at least two of Qlik Sense, Talend, Dataiku, and MS SQL Server, plus GCP services.
• Experience with monitoring and alerting tools such as Cloud Logging and Monitoring, Prometheus, Grafana, or similar, and runbooks.
• Knowledge of incident triage, escalation, and root-cause reports.
• Experience with IAM, MFA, RBAC, SSO integration, encryption, key management, and certificates.
• Experience with vulnerability scanning, patching, hardening, endpoint protection, SIEM integration, and audit-log design.
• Knowledge of API gateways, OAuth 2.0, OWASP API Security Top Ten, cloud backups, restore, business continuity, and disaster recovery.

Good to have

• Terraform and CI/CD; SRE practices including SLOs, error budgets, and cost alerts; or deeper MS SQL Server DBA skills.
• Google Professional Cloud Security Engineer, CISSP, CCSP, or ITIL certification, or experience with national cybersecurity-control audits.