Senior Cloud DevSecOps Engineer

What it's about

Global IT Services is responsible for all the information technology provided to our organization to achieve our mission and better serve Partners Group’s customers with excellence. We provision resilient, highly available, secure IT services and infrastructure, acting as a trusted Technology partner for Partners Group employees and IT service providers.  

As Senior DevSecOps Security Engineer, you will play a pivotal role in defining, maintaining, and implementing the Partners’ Group’s IT security strategy. You will apply your deep expertise in information security technologies, concepts, and methodologies to combat potential cyber threats and ensure regulatory compliance of Partners Group. 

You will find yourself engineering, implementing and managing security measures and IT security services to protect Partners Group's IT applications from vulnerabilities and cyber-attacks.

You will have the following responsibilities:

DevSecOps 

• Provide subject matter expertise for AWS infrastructure and application security design and implementation.
• Implement security controls and design requirements during the software development process and change management lifecycle.
• Demonstrate exceptional proficiency in identifying systems vulnerabilities and providing actionable remediation suggestions
• Define best in class authentication and authorization methods and access controls
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
• Conduct or facilitate threat modelling of services and applications that tie to the risk and data associated with the service or application.
• Design technical solutions to address security weaknesses, and work with relevant stakeholders to implement them.
• Provide on-call IT security support, overnight and on weekends over a period of 7 consecutive days, on a recurring rotation of once every 4 to 5 weeks.

Innovate

• Research advanced approaches regarding application security best practices in the field to determine trends that may impact the operations and address services optimization and continuous improvement opportunities 
• Stay on the leading edge of IT security, vulnerability practices and remain current on new technologies and available vendor packages

Standardise & collaborate

• Provide guidance and expertise to ensure that IT security measures are effectively integrated into all aspects of the organization's IT landscape
• Participate in application and infrastructure projects to provide security-planning advice 
   

www.partnersgroup.com