Position: AWS/Alibaba Technical Lead - work only from Poland
Company: Luxoft
Category: Security
Experience required: 5y
English level: upper

Project Description:
Our Technology teams work closely with Bank's global businesses to help design and build digital services that allow our millions of customers around the world; to bank quickly, simply and securely. We also run and manage our IT infrastructure, data-centres and core banking systems that power the world's leading international bank.
Our multi-disciplined Technology teams include amongst others: DevSecOps engineers, IT architects, front and back-end developers, infrastructure specialists, cybersecurity experts, and delivery, project and programme managers.

Brief overview of the business areas:
Global Cybersecurity is responsible for enabling businesses and functions to manage their information, technology and cybersecurity risks by ensuring these are well-understood, and that controls used the manage such events are defined, assessed and implemented appropriately. Cybersecurity predominantly deliver this via objective, independent, professional and specialized subject matter experts. The role forms part of the first line of defence in relation to the risk management framework.
Responsibilities:
• Technical consultancy on the AWS/Alibaba environments specifically in relation to Identity and Access management practices and controls.
• Working collaboratively with various engineering teams across the organisation to effectively define strategic IAM architecture
• Build, support and provide ongoing maintenance for custom feeds into an internal compliance database.
Mandatory Skills Description:
• In-depth knowledge of AWS security services and features such as IAM, VPC, EC2, S3, CloudTrail, CloudWatch, KMS, GuardDuty, etc.
• Experience in implementing and maintaining security policies, standards, and guidelines in AWS environment
• Knowledge of security best practices, including network security, encryption, identity and access management, and incident response
• Understanding of cloud infrastructure and network security design patterns
• Experience with security compliance frameworks like PCI DSS, ISO 27001, NIST, SOC 2, etc.
• Strong scripting skills in at least one of the scripting languages (e.g. Python, Perl, Ruby, etc.)
• Experience with security tools such as intrusion detection/prevention systems, firewalls, and log analysis tools
• Understanding of cloud-based deployment models, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)
• Excellent problem-solving skills, communication skills, and the ability to work well in a team environment.