Operations and Security Engineer

<h2>What you will do</h2><ul><li>Monitor the platform around the clock, respond to alerts, troubleshoot, fix and restore service.</li></ul><ul><li>Handle emergencies inside or outside office hours, and turn around any report the client asks</li></ul><ul><li>Patch, harden and run regular vulnerability reviews on every component; keep endpoint protection compatible.</li></ul><ul><li>Implement and operate the security controls: identity and access with MFA, RBAC and single sign-on; encryption everywhere; separated dev, test and production; signed and verified automation code; file-type whitelisting; mobile-device restrictions.</li></ul><ul><li>Run security logging, audit logs and the SIEM integration; protect logs from tampering.</li></ul><ul><li>Secure the APIs: gateway, OAuth 2.0, OWASP API security.</li></ul><ul><li>Own backups, business continuity and disaster recovery, and test them.</li></ul><ul><li>Run incident response: immediate notification, an initial report within 24 hours, documented procedures with SLAs and escalation.</li></ul><ul><li>Write the security architecture and API design documents and the infrastructure parts of the architecture pack, and the bi-monthly operations report.</li></ul><h2>What you need</h2><ul><li>Linux and Windows server administration on public and sovereign clouds (GCP, OCI, Deem or similar)</li></ul><ul><li>Administration of at least two of Qlik Sense, Talend, Dataiku and MS SQL Server, plus GCP services</li></ul><ul><li>Monitoring and alerting (Cloud Logging and Monitoring, Prometheus and Grafana or similar) and runbooks</li></ul><ul><li>Incident management: triage, escalation, root-cause reports</li></ul><ul><li>Identity and access: IAM, MFA, RBAC, SSO integration</li></ul><ul><li>Encryption at rest and in transit, key management, certificates</li></ul><ul><li>Vulnerability scanning, patching and hardening; working with endpoint-protection tools</li></ul><ul><li>SIEM integration and audit-log design</li></ul><ul><li>API gateways, OAuth 2.0, OWASP API Security Top Ten</li></ul><ul><li>Backup, restore, business continuity and disaster recovery in the cloud</li></ul><h2>Good to have</h2><ul><li>Terraform and CI/CD; SRE practice (SLOs, error budgets, cost alerts)</li></ul><ul><li>MS SQL Server DBA depth</li></ul><ul><li>Google Professional Cloud Security Engineer, CISSP, CCSP or ITIL</li></ul><ul><li>Experience with national cybersecurity-control audits</li></ul>