Site Reliability Engineer Sre

Hybrid Role

Senior Site Reliability Engineer
*** Risk Solutions is seeking a Senior SRE with proven industry experience to join our B1 Cloud project and SRE squad. Our teams are collaborative and forward thinking; the successful candidate will build infrastructures code, software services (PaaS and SaaS) including security policies, in order to migrate all of LNRS applications running in our primary Boca Raton location to Microsoft Azure.

The position is highly visible across all internal stakeholder groups, and will be working closely with various business vertical and their projects deliverables, Development, QA, IT Operations and Customer Operations teams.

You will be a collaborative team player, with ability to influence, communicate and solve problems effectively, whilst handling a fast-paced working environment. This will be combined with a transition to DevOps practices, agile support and deployment processes, as we start our migration to the public cloud.

You will be a key member of our team working with a diverse range of technologies. You will enjoy working in a friendly environment and benefit from our investment in staff.

Main Responsibilities:
Ensuring that our Database migration from the Boca data center to Microsoft Azure is a success
Delivery of resilient database designs and stacks via "Infrastructure as Code " and other DevOps practices.
Diagnosis and resolution of complex system and application issues.
Writing and maintaining systems and database documentation for technical and non-technical audiences
Assisting in the development of comprehensive information security procedures and practices and deployment of a detailed security audit across our database tier.
Ensure 24/7 technical support and Service Level Agreement for customers is met
Good understanding of defensive, corrective and detective controls and requirements
Monitoring and on-going support of critical, high revenue business applications.

Essential Skills and Attributes:

Operations
Use of orchestration tools such as Terraform, Ansible or CloudFormation
Previous Analytic and troubleshooting experience is required
Experience migrating application from on-premises to public cloud.
Experience with Blue-Green deployment methodologies.
Experience working with containerised workloads such as Docker and Kuebernetes.
Experience with Log Management tools e.g Elastic Stack, Graylog or Splunk
Experience working with an enterprise RDBMS such as MySQL and/or Microsoft SQL Server.
Knowledge of change control and associated procedures.
Use of Secret Management services e.g - Hashicorp Vault
Experience with any high-level programming language.
Configuration Management tools e.g. Ansible, Puppet, Chef or equivalents.
Professional experience of working within the public cloud Azure, AWS or GCP.
Hands-on experience of Linux and Windows server including support and troubleshooting.
System and application monitoring e.g. Prometheus, Grafana, Nagios etc.
Professional Experience with common source control tools e.g Git, SVN
Cloud Architecture and system design to solve key business problems and facilitate team goals.
Strong and enthusiastic technologist, able to demonstrate a broad technical knowledge
Ability to act as a point of expertise, advise others in the team on best practise and impart knowledge.

Development
Coding and scripting experience e.g. Powershell, Bash, Python or equivalent
Continuous Integration/Delivery Tools e.g. Gitlab, Github, Jenkins
Cloud Architecture and system design to solve key business problems and facilitate team goals.

Security
Hands-on experience performing application static/dynamic security and penetration assessment with tools such as SonarQube, CheckMarx, AppScan, BurpSuite, OWASP ZAP Proxy, WebInspect, Fortify, Veracode, Nessus etc.
Good understanding of defensive, corrective and detective controls and requirements
Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each. Ability to recognize and escalate Security issues
Exposure to application security testing (source code review and web/mobile application penetration tests)
Familiarity with different types of security vulnerabilities and tools for countermeasure
The candidate should be well versed in Information security principles at an Intermediate level

Desirable Skills:
Desirable AWS / Azure Certifications

Qualifications:
5+ years experience and proven background working in a technical, Cyber Security related position.
BSc Engineering/Computer Science/IT Security or relevant experience.
Industry certification such as CSSP, AWS Certified Security, CSSLP desirable