Goldman Sachs is a leading global investment banking, securities and investment management firm that provides a wide range of services worldwide to a substantial and diversified client base that includes corporations, financial institutions, governments and high net-worth individuals. Founded in 1869, it is one of the oldest and largest investment banking firms.

Secrets and Encryption Services is part of the Identity and Access Management (IAM) business unit within Core Engineering Division of Goldman Sachs. Our mission is to protect the firm and our clients from cyberthreats such as credential compromise through the services we deliver and operate.   The S&ES team is on a journey to uplift credential management solutions across the enterprise with a transformational programme to improve the security posture for the firm. including the integration and adoption of HashiCorp Vault across environments.

Role Overview:

We are looking for a motivated and skilled Platform Engineer with a developing interest in cyber security and secrets management to join our team. The ideal candidate will contribute to ensuring the reliability, performance, and scalability of our platform and infrastructure while learning and implementing security best practices. This role involves working collaboratively with cross-functional teams and implementing new functional features, operational improvements and cyber security practices under the guidance of senior team members to enhance our operational efficiency and security posture.

Responsibilities:

• System Reliability, Performance, and Security:
  • Participate in the design, implementation, and maintenance of highly available, scalable, and secure systems.
  • Assist in monitoring system performance, reliability, and security, helping to identify and resolve issues.
  • Troubleshoot and resolve issues across environments, contributing to root cause analysis and incident management post-mortems.
• Infrastructure Automation, Management, and Security:
  • Contribute to automating infrastructure provisioning, configuration, and deployment processes with a focus on security.
  • Assist in implementing and managing CI/CD pipelines to streamline software delivery while adhering to security best practices.
  • Support infrastructure security and compliance efforts.
• Secrets Management:
  • Assist in the implementation and management of secrets management solutions to securely store sensitive information.
  • Learn and apply system security principles and best practices around secret and key management.
  • Promote best practices for secrets management within the organization.
• Collaboration and Communication:
  • Collaborate with development, product, and security teams to ensure seamless integration, deployment, and security of our services.
  • Communicate effectively with team members to understand requirements and provide updates on system status and enhancements.
• Documentation and Reporting:
  • Assist in maintaining documentation of systems, processes, procedures, and security measures.
  • Contribute to generating reports on system performance, incidents, and improvements.

Core Skills and Experience:

• Technical Skills:
  • Understanding of high-availability systems architecture and the ability to support scalable and robust systems.
  • Proficiency in at least one scripting language (Python, Bash, etc.).
  • Familiarity with containerization and orchestration tools (Kubernetes).
  • Exposure to infrastructure as code (Terraform) concepts.
  • Familiarity with monitoring, logging, and security tools (e.g., Prometheus, Grafana, Splunk, BQL).
  • Experience supporting either Windows or Linux environments.
• Cyber Security:
  • Basic understanding of cyber security principles and best practices.
  • Interest in learning about and working with secrets management solutions.
  • Awareness of security frameworks (NIST, ISO 27001).
• Problem-Solving and Analytical Skills:
  • Good problem-solving and analytical skills to identify and resolve issues.
  • Ability to identify potential security threats and vulnerabilities.
• Communication:
  • Good communication skills to effectively collaborate with team members.
  • Ability to communicate technical concepts to both technical and non-technical audiences.

Preferred Qualifications:

• Bachelor's degree in Computer Science, Engineering, or a related field.
• 3-5 years of experience in Development, SRE, DevOps, or related roles with an interest in cyber security.
• Experience working in a regulated industry (e.g., finance) is a plus.
• Exposure to Secrets Management platforms