Roles and Responsibilities

Operations

• Identify risk(s) and implement corrective action plan to mitigate risk(s).
• Handle negotiations with IA and ORM, and with Policy Owners when more cloud-friendly policy changes need to be influenced.
• Advise engineers on application of policy
• Monitor processes to ensure they are designed with control in mind.
• Ensure controls are automated and sustainable for cloud scale
• Manage cross border clearance as needed (GCP, Snowflake, MongoDB Atlas, Confluent Kafka, Cloudability, etc.)
• Oversee records management and retention of records for Citi.
• continual assessment of Management Controls Assessment (MCA) Efficacy for Public Cloud
• Educate and guide Application Teams on adopting best practices for MCA I Public Cloud
• Develop Compliance in Public Cloud training series
• Perform “self-audits” as a quality control function within Public Cloud Team
• Automate reporting capabilities for Compliance matters in Public Cloud

Strategic

• Define the strategy for risk and governance plan
• Drive the initiative of embedding compliance within Public Cloud space whilst actively consulting policies and engaging with engineering teams who have multiple concurrent domains such as compute, container, db, middleware, etc.
• Take ownership of negotiations and lead GCP from a risk perspective.
• Ensure controls are automated and sustainable for cloud scale.
• Advise and educate Application Teams on best practices for MCA I Public Cloud.
• Implement compliance in Public Cloud training series.
• Automate reporting capabilities for Compliance matters in Public Cloud.

Basic Qualifications

• Undergraduate degree in related field or equivalent experience
• Hands on experience developing and engineering software and consumer facing applications
• Experience developing and scaling JAVA REST services, using frameworks such as Spring
• Experience in modern microservices architectures and deployments
• Experience working in a distributed, cloud-based environment using Azure/AWS/GCP (Docker/Kubernetes)
• Experience with cloud infrastructure and data services (compute, storage, networking and others)
• Experience with Infrastructure as Code (IaC) practices and frameworks
• Experience working with cloud-based relational and NoSQL databases
• Experience with Test Driven Development (TDD) and test automation using unit testing and behavioral testing frameworks
• Familiarity with devops and SRE practices
• Experience with modern SDLC tools, branching strategies, and ability to develop and enforce CI/CD practices
• Familiarity with Domain Driven Design and Event Driven Architectures
• Knowledge of front-end stack, best practices, frameworks and overall architecture
• Strong analytical skills
• Strong collaboration and interpersonal skills
• Experience working with Linux/UNIX, Docker

Preferred Qualifications

• Experience as an AWS Solutions Architect, Cloud Security Certification, and/or OpenStack Administrator Certification a plus. (Other cloud-related certification also a plus.)
• Experience with TDD and automated UI testing frameworks
• Experience working with any design frameworks
• Developer level operations proficiency — knowledge of networking, familiarity with load balancers, hypervisors, CDNs, etc.