Job Description & Summary
The GTSEC organization is seeking a skilled and experienced to join our organization. The will be responsible for working with vendors and application development teams to assess compliance with the firm's Information Security standards via application security review programs to ensure the confidentiality, integrity, and availability of our organization's information assets and reduce the possibility of information breaches.The ideal candidate will possess a strong technical background, risk-based mindset, planning expertise, and exceptional relationship building skills.
If you are seeking an exciting career with the scope to grow your cyber security through major change on a global scale, then GTSEC will empower you to do so. Our mission protects 375,000 PwC members across 152 member firms worldwide as well as our global clients.
You'll work from day one as part of an international team of problem solvers, helping to solve complex business issues from strategy to execution.
About the team:
Secrets Management is defined, within PwC, as a component of our process for securing sensitive information. It involves protecting various forms of data; including, but not limited to, passwords/credentials, service accounts and any other privileged resources.
Job Overview:
Secrets Management Engineer with expertise in HashiCorp Vault to join our team. In this role, you will play a vital role in ensuring the confidentiality, integrity, and availability of our critical data assets through effective secrets management practices.
Role responsibilities:
Secrets Management: Manage and safeguard sensitive data and secrets using HashiCorp Vault, implementing access control policies and encryption mechanisms.
Vault Configuration: Configure and maintain HashiCorp Vault to ensure high availability, scalability, and reliability.
Integration: Integrate HashiCorp Vault with various applications and systems, ensuring seamless secrets retrieval and management.
Automation: Develop and manage automation scripts using Python, Go, and other relevant languages to streamline routine tasks and processes. Continuously enhance automation capabilities to improve operational efficiency.
Infrastructure as Code (IaC): Utilize Terraform to define and manage infrastructure configurations as code, collaborating with the team to design, deploy, and scale infrastructure components.
DevOps Pipeline: Build and maintain CI/CD pipelines using Azure DevOps and Github Actions. Implement automated testing, deployment, and monitoring solutions to ensure the reliability and availability of the pipeline infrastructure.
Cloud Administration: Administer and manage cloud resources, particularly in Microsoft Azure. Optimize cloud infrastructure to balance cost-effectiveness and performance.
Linux Administration: Administer and maintain Linux-based systems, performing configuration, troubleshooting, and security enhancements.
Scaling and Optimization: Monitor system performance, identify bottlenecks, and apply optimizations to enhance scalability. Collaborate with cross-functional teams to anticipate scaling requirements.
Collaboration: Work closely with development, QA, and operations teams to align infrastructure and deployment strategies with project objectives. Foster a culture of collaboration, knowledge sharing, and best practices within the team.
Documentation and Training: Maintain comprehensive documentation of infrastructure configurations, processes, and procedures. Provide training and support to team members on relevant tools and processes.
Qualifications:
Proven experience in secrets management with a focus on HashiCorp Vault.
Proficiency in Terraform and CI/CD tools like Azure DevOps and Github Actions.
Familiarity with cloud platforms, particularly Microsoft Azure.
Strong problem-solving skills and ability to troubleshoot effectively.
Excellent communication and collaboration skills.
Proficiency in cloud and Linux administration.
Graduation:
Desirable degree in IT areas.
Languages:
Advanced English
#LI-DNI