About this role
What you will do
-
Monitor the platform around the clock, respond to alerts, troubleshoot, fix and restore service.
-
Handle emergencies inside or outside office hours, and turn around any report the client asks
-
Patch, harden and run regular vulnerability reviews on every component; keep endpoint protection compatible.
-
Implement and operate the security controls: identity and access with MFA, RBAC and single sign-on; encryption everywhere; separated dev, test and production; signed and verified automation code; file-type whitelisting; mobile-device restrictions.
-
Run security logging, audit logs and the SIEM integration; protect logs from tampering.
-
Secure the APIs: gateway, OAuth 2.0, OWASP API security.
-
Own backups, business continuity and disaster recovery, and test them.
-
Run incident response: immediate notification, an initial report within 24 hours, documented procedures with SLAs and escalation.
-
Write the security architecture and API design documents and the infrastructure parts of the architecture pack, and the bi-monthly operations report. What you need
-
Linux and Windows server administration on public and sovereign clouds (GCP, OCI, Deem or similar)
-
Administration of at least two of Qlik Sense, Talend, Dataiku and MS SQL Server, plus GCP services
-
Monitoring and alerting (Cloud Logging and Monitoring, Prometheus and Grafana or similar) and runbooks
-
Incident management: triage, escalation, root-cause reports
-
Identity and access: IAM, MFA, RBAC, SSO integration
-
Encryption at rest and in transit, key management, certificates
-
Vulnerability scanning, patching and hardening; working with endpoint-protection tools
-
SIEM integration and audit-log design
-
API gateways, OAuth 2.0, OWASP API Security Top Ten
-
Backup, restore, business continuity and disaster recovery in the cloud Good to have
-
Terraform and CI/CD; SRE practice (SLOs, error budgets, cost alerts)
-
MS SQL Server DBA depth
-
Google Professional Cloud Security Engineer, CISSP, CCSP or ITIL
-
Experience with national cybersecurity-control audits