Business Function
Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Technology, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.
Job Role:
We are looking for a hands-on technology professional to join our in-house Information Security Services team, supporting the Bank’s non-human identity (NHI) and machine identity capabilities across environments and platforms.
The successful candidate will help operate, test, automate and govern security services that manage NHI and machine identities. This role is suitable for someone who is technically curious, disciplined in production support, able to learn across security, infrastructure, cloud and software engineering domains, and comfortable working in a mission-critical environment.
Responsibilities:
- Operate, support and govern NHI and machine identity services protecting the Bank’s information assets across data centers, public cloud platforms and container environments.
- Support lifecycle activities for service accounts, secrets, passwords, API keys, certificates, private keys, SSH keys, tokens and workload identities, including onboarding, rotation, renewal, revocation, revalidation and decommissioning.
- Assist with transitioning from legacy to modern identity patterns.
- Build, test and maintain scripts and automation jobs to improve investigation, health checks, evidence collection, reporting and operational efficiency through approved CI/CD pipelines.
- Perform production monitoring and support, including service health checks, capability monitoring, log review, alert triage, incident investigation and response within agreed service levels.
- Work with application, infrastructure, cloud, SRE, IAM and vendor teams to troubleshoot integration issues, support onboarding and drive incidents or service requests to closure.
- Maintain operational documentation, runbooks, standard operating procedures and audit evidence to support security governance, resilience and compliance reviews.
Requirements
- Experience in production support, software engineering, infrastructure engineering, DevOps, IAM, cybersecurity or related technology roles
- Hands-on scripting or programming ability using one or more of Shell, Python, PowerShell, Java, Go or JavaScript to support investigation, automation and integration tasks
- Foundational understanding of identity and access management, authentication, authorization, secrets management, PKI, certificates, cryptography, APIs and secure software practices.
- Working knowledge of Linux or Unix, networking fundamentals, databases, cloud platforms, containers and CI/CD practices.
- Exposure to NHI tools or concepts will be advantageous, but deep prior experience is not mandatory.
- Able to work methodically in a 24x7 production support environment, including shifts or on-call arrangements where required.
- Bachelor’s degree or diploma in Computer Science, Information Systems, Cybersecurity, Engineering or equivalent practical experience.
Functional / Technical Competencies
- Strong analytical and troubleshooting skills, with the ability to follow evidence, read logs, isolate failure points and document findings clearly.
- Possess knowledge of information security principles, secure coding practices, cryptography, auditability, resilience and change control vigor will be advantageous.
- Ability to learn across multiple disciplines, including IAM, secrets management, certificate lifecycle, cloud security, infrastructure operations, application integration and DevSecOps.
- Working knowledge of Linux, shell scripting and CI/CD pipelines, with willingness to develop deeper automation and integration skills.
- Good communication skills and ability to collaborate with application teams, infrastructure teams, security architects, SRE teams, auditors and technology vendors.
Location:
DBS Asia Hub
Job:
Technology
Schedule:
Regular
Employee Status:
Full time