4 days ago
Singapore (city not specified)Senior
Responsibilities
- Design and maintain security baselines for Virtuozzo Application Platform, Virtuozzo Hybrid Infrastructure, virtualization, and OpenStack-like components.
- Define secure isolation patterns for development, testing, UAT, experimental, and sandbox environments, including tenant separation, administrative boundaries, and controlled connectivity.
- Specify and review network segmentation, firewall rules, bastion and jump-host access, TLS, DNS, and restricted-egress patterns, with traceable flow documentation.
- Establish CIS-aligned hardening, patching follow-up, vulnerability management, configuration-drift controls, and secure platform-service configurations.
- Design Vault namespaces, policies, authentication methods, rotation, TTL, and revocation, including secure GitLab JWT and production AppRole patterns.
- Prevent clear-text secrets in Terraform, Ansible, and deployment tooling.
- Review and harden centralized Ansible content and infrastructure-as-code practices covering code review, testing, promotion, inventory, and credential handling.
- Govern internal Docker and Nexus registries, approved base images, scanning, SBOM, provenance, and promotion of trusted images.
- Define security logging and telemetry using ELK/EFK, OpenTelemetry, and Splunk, ensuring important administrative and security events are detectable and retained.
- Create runbooks, exception-handling processes, incident support materials, audit evidence packs, and knowledge-transfer documentation.
- Drive implementation with Infrastructure, Network, SOC, IAM, DevOps, and application teams and support deployment and production operations.
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, or equivalent.
- At least 8 years of delivery and hands-on security experience.
- Experience with private cloud, Kubernetes, OpenStack, OpenShift, VMware, or an equivalent platform.
- Experience with Linux and container hardening, vulnerability management, and secure administration.
- Knowledge of network segmentation, firewalling, bastion patterns, TLS, and DNS fundamentals.
- Experience implementing HashiCorp Vault or a comparable enterprise secrets-management solution.
- Experience with GitLab CI/CD and Ansible security, including secure credential patterns.
- Experience with container images, registries, SBOM, and trusted-base-image governance.
- Experience with security logging, SIEM integration, and operational evidence.
- Ability to establish a baseline and drive implementation across multiple infrastructure owners.
- Demonstrated success as a hands-on architect-builder who can convert incomplete requirements into security designs, working implementations, evidence, documentation, and operational handovers.
- Ability and willingness to perform deployment and production-support work in addition to advisory activities.
- Understanding of availability, recoverability, change control, audit evidence, operational ownership, and supportability.
- Must be autonomous, tenacious, rigorous, and able to organize multiple concurrent issues.
Tech Stack
Categories
About Azqore SA
Azqore SA provides outsourced core banking platforms and back-office processing for private banks and wealth managers, centered on its S2i integrated information system. It delivers IT and BPO services, including digital banking products and operations processing, from hubs in Switzerland, Portugal, and Singapore. Founded in 2018 and headquartered in Lausanne, it is a subsidiary of Indosuez Wealth Management (Crédit Agricole Group) and supports 20+ client banks with over CHF 200 billion in assets across 10 countries.