דרושים Senior Cloud Security Engineer ב-Samsung ב-Philippines, Taguig

Role and Responsibilities

Roles and responsibilities includes, but is not limited to:

• [Account analysis by sales type] Participate in categorization of accounts by their sales type and growth plans based on their target business type.
• [Sales activity management] Participate in the management of the feasibility of the sales activities based on the sales/marketing plans aimed at achieving common goals with accounts (set guidelines for ROI analysis and sales activities regarding ATL(Above the line) and BTL(Below the line)).
• [Volume management] Analyze accounts' carried product volume, product logistics, actual sales, and inventory.
• [Risk management] Check for potential financial risks in the account's collateral (limit), orders, and payment.
• [Retail channel management] Analyze whether the contract, pricing policy, and the product distribution channel are aligned.

Skills and Qualifications

To be successful in this role, you must have or be able to:

• Bachelor's degree in Engineering, Business Administration, or a related field; advanced degree is a plus.
• At least 3 years of experience in sales, business development, or account management, preferably within the air conditioning/HVAC industry or other B2B sectors.
• Proven ability to build and maintain successful business relationships with clients, contractors, architects, engineers, and other stakeholders.
• Excellent verbal and written communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.
• Proficient in Microsoft Office Suite (Word, Excel, PowerPoint, Outlook) and CRM software.
• Ability to work independently, prioritize tasks, and manage multiple projects simultaneously.
• Willingness to travel domestically attend meetings, conferences, and site visits.
• Strong analytical and problem-solving skills.
• Must be willing to work fully on-site in McKinley Hill, Taguig

Job Description:

• Lead the design, implementation, and management of Kubernetes clusters across multiple environments (on-premise, cloud-based, hybrid).

• Design and implement CI/CD pipelines for seamless application delivery and integration with Kubernetes.

• Develop and maintain infrastructure as code (IaC) using tools like Terraform, Helm, and Ansible.

• Implement and manage Kubernetes security policies, RBAC, namespaces, service accounts, and other best practices to ensure the safety of the platform.

• Research event log warnings and errors, Troubleshoot and resolve complex Kubernetes-related issues, ensuring minimal downtime and incident resolution.

• Optimize the deployment, scaling, and monitoring of containerized applications within Kubernetes.

• Automate the monitoring and alerting of Kubernetes clusters using tools like Prometheus and Grafana

• Spearhead efforts in upgrading and patching Kubernetes environments, as well as ability to respond to and remediate vulnerabilities with minimal disruption to service.

• Stay up to date with new features, security patches, and best practices within the Kubernetes ecosystem.

• Collaborate with software engineering teams to ensure smooth deployment and operation of applications in a containerized environment.

• Mentor and provide technical leadership to junior Kubernetes engineers and DevOps team members.

• Work with cloud platforms (AWS, Azure, GCP) to manage Kubernetes clusters and ensure scalability in the cloud.

• Implement disaster recovery and backup strategies for Kubernetes-based workloads.

• Contribute to documentation, knowledge sharing, and process improvements for Kubernetes operations.

Skills and Qualifications

• Bachelor's degree in Computer Science, Information Technology, or any related field

• Strong experience in System Administration (xEL, Ubuntu)

• Solid understanding of containerization, microservices and DevOps Practices.

• 5+ Years experience in cloud platforms (AWS, Azure, GCP)

• 3+ Years experience in containerization and orchestration (Docker + Kubernetes)

• 3+ Years experience in building and managing CI/CD Pipelines

• In-depth knowledge of Kubernetes networking, ingress controllers, load balancing, and service meshes (e.g., Istio, Linkerd).

• Familiarity with Infra Monitoring and Performance Optimization Tools (Prometheus, Grafana, Fluentd)

• Knowledge in security best practices for containerized and Kubernetes environments (RBAC, Pod Security Policies, Network Policies)

• Experience with tools like Istio, ArgoCD, or other service mesh and GitOps tools.

• Experience in IaC (Terraform) and building re-usable Terraform Modules.

• Proficiency in scripting languages such as Bash, Python or Powershell.

• Excellent problem-solving and analytical skills.

• Strong collaboration and communication skills.

• Certifications such as CKA (Certified Kubernetes Administrator), CKAD (Certified Kubernetes Application Developer), or CKS (Certified Kubernetes Security Specialist), but not required.

Role and Responsibilities

• Security Architecture and Implementation: Design, implement, and maintain robust security architectures for on-premises, AWS, GCP, and Azure environments.

• Compliance and Standards: Ensure compliance with industry standards and regulations, including NIST (e.g., NIST 800-53, NIST CSF) and PCI DSS. Conduct regular audits and assessments to identify and mitigate compliance gaps.

• Vulnerability Management: Perform comprehensive vulnerability assessments and penetration testing. Utilize SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tools to identify and remediate application vulnerabilities.

• Code Reviews: Conduct thorough code reviews to identify security flaws and ensure adherence to secure coding practices.

• Intrusion Detection and Monitoring: Deploy and manage IDS (Intrusion Detection Systems) and SIEM (Security Information and Event Management) solutions for real-time threat detection and incident response. Configure and tune SIEM rules and alerts for optimal threat visibility.

• Cloud Security: Implement and manage security controls in AWS, GCP, and Azure environments, including IAM (Identity and Access Management), network security groups, and data encryption. Leverage cloud-native security services (e.g., AWS Security Hub, GCP Security Command Center, Azure Security Center).

• Incident Response: Participate in incident response activities, including investigation, containment, eradication, and recovery. Develop and maintain incident response plans and playbooks.

• Security Policy Management: Develop, maintain, and update security policies, standards, and procedures based on evolving threats and business needs.

• Red and Blue Team Operations: Establish and lead red and blue team exercises to assess and improve the organization’s security posture. Plan and execute penetration tests, vulnerability assessments, and security audits.

• Security Automation: Implement security automation and orchestration using tools like Jenkins, Terraform, or Python scripting to streamline security operations and improve efficiency.

• Threat Intelligence: Stay up-to-date with the latest security threats, vulnerabilities, and attack techniques. Leverage threat intelligence feeds to proactively identify and mitigate risks.

• Security Tooling: Experience with security tools such as Nessus, Burp Suite, Wireshark, Metasploit, Snort, Suricata, and open-source security tools is highly desired.

• Key Management: Implement and manage cryptographic key management solutions.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred.

• Minimum of 7+ years of experience in a security engineering role.

• Strong understanding of security principles, best practices, and industry standards (NIST, PCI DSS, ISO 27001).

• Expertise in cloud security (AWS, GCP, Azure).

• Proficiency in scripting languages (Python, Bash, PowerShell).

• Experience with container security (Docker, Kubernetes).

• Experience with Infrastructure as Code (IaC) such as Terraform or CloudFormation.

  Strong knowledge of networking protocols and security concepts (TCP/IP, firewalls, VPNs).

• Excellent problem-solving and analytical skills.

• Strong communication and interpersonal skills.

• Relevant security certifications such as CISSP, CISM, OSCP, CEH, AWS Certified Security – Specialty, GCP Professional Cloud Security Engineer, or Azure Security Engineer Associate.

Responsibilities:

• Lead the design, implementation, and management of Kubernetes clusters across multiple environments (on-premise, cloud-based, hybrid).

• Design and implement CI/CD pipelines for seamless application delivery and integration with Kubernetes.

• Develop and maintain infrastructure as code (IaC) using tools like Terraform, Helm, and Ansible.

• Implement and manage Kubernetes security policies, RBAC, namespaces, service accounts, and other best practices to ensure the safety of the platform.

• Research event log warnings and errors, Troubleshoot and resolve complex Kubernetes-related issues, ensuring minimal downtime and incident resolution.

• Optimize the deployment, scaling, and monitoring of containerized applications within Kubernetes.

• Automate the monitoring and alerting of Kubernetes clusters using tools like Prometheus and Grafana

• Spearhead efforts in upgrading and patching Kubernetes environments, as well as ability to respond to and remediate vulnerabilities with minimal disruption to service.

• Stay up to date with new features, security patches, and best practices within the Kubernetes ecosystem.

• Collaborate with software engineering teams to ensure smooth deployment and operation of applications in a containerized environment.

• Mentor and provide technical leadership to junior Kubernetes engineers and DevOps team members.

• Work with cloud platforms (AWS, Azure, GCP) to manage Kubernetes clusters and ensure scalability in the cloud.

• Implement disaster recovery and backup strategies for Kubernetes-based workloads.

• Contribute to documentation, knowledge sharing, and process improvements for Kubernetes operations.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or any related field

• Strong experience in System Administration (xEL, Ubuntu)

• Solid understanding of containerization, microservices and DevOps Practices.

• 5+ Years experience in cloud platforms (AWS, Azure, GCP)

• 3+ Years experience in containerization and orchestration (Docker + Kubernetes)

• 3+ Years experience in building and managing CI/CD Pipelines

• In-depth knowledge of Kubernetes networking, ingress controllers, load balancing, and service meshes (e.g., Istio, Linkerd).

• Familiarity with Infra Monitoring and Performance Optimization Tools (Prometheus, Grafana, Fluentd)

• Knowledge in security best practices for containerized and Kubernetes environments (RBAC, Pod Security Policies, Network Policies)

• Experience with tools like Istio, ArgoCD, or other service mesh and GitOps tools.

• Experience in IaC (Terraform) and building re-usable Terraform Modules.

• Proficiency in scripting languages such as Bash, Python or Powershell.

• Excellent problem-solving and analytical skills.

• Strong collaboration and communication skills.

• Certifications such as CKA (Certified Kubernetes Administrator), CKAD (Certified Kubernetes Application Developer), or CKS (Certified Kubernetes Security Specialist), but not required.