Senior DevOps Engineer, HSBC

HSBC

Location:
China, Shanghai

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

Our GCIO organisation plays a critical role for the bank. This team partners with the businesses to build the platforms, systems, and products that our customers use every day. We keep people’s money and data safe, and are at the forefront of driving innovation for our businesses, customers, and colleagues.

Job Responsibility:

Lead the design and implementation of secure, automated CI/CD pipelines to streamline development, testing, and deployment of banking applications
Implement Infrastructure as Code (IaC) using tools like Terraform or Ansible to provision and manage secure, scalable infrastructure
Automate security scanning, compliance checks, and vulnerability management within development workflows using tools like Snyk, SonarQube, or Aqua Security
Drive adoption of DevSecOps best practices to embed security into the software development lifecycle (SDLC)
Collaborate with the production support team to troubleshoot and resolve production incidents, ensuring minimal downtime for critical banking systems
Provide technical expertise during incident response, focusing on identifying security-related issues and implementing rapid fixes
Work closely with production support and application teams to integrate secure DevOps practices into operational workflows
Partner with the bank's operation resilience project team to align on security and resilience initiatives, ensuring compliance with regulatory requirements
Coordinate with global and regional SRE and DevOps teams to maintain consistency in tools, processes, and security standards across distributed systems
Ensure banking systems comply with China's regulatory requirements and global banking standards
Implement secure coding practices, secrets management, and encryption to protect sensitive financial data
Conduct regular security assessments and audits to identify and mitigate risks in production environments
Deploy and maintain monitoring tools to track system performance, security events, and compliance metrics
Develop dashboards and alerts to proactively detect and respond to potential issues in production systems
Optimize CI/CD pipelines, deployment processes, and security workflows to reduce lead time, improve deployment frequency, and enhance system reliability
Collaborate with SRE teams to integrate reliability and security practices into automated workflows
Lead and mentor a team of DevSecOps engineers, fostering a culture of security-first development, automation, and collaboration
Provide training and guidance on DevSecOps tools and practices to development and operations teams

Requirements:

Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field
Minimum of 7 years of experience in DevOps, DevSecOps, or related roles, with at least 3 years in a leadership or senior engineering role
Proven experience in automating CI/CD pipelines and implementing security practices in a financial services or banking environment
Experience supporting production support teams during incidents
Familiarity with coordinating with global/regional SRE and DevOps teams in a distributed environment
Expertise in Jenkins, GitLab CI, GitHub Actions, or CircleCI for building secure, automated pipelines
Proficiency in Terraform, CloudFormation, or Ansible for automated infrastructure provisioning
Deep knowledge of AWS, Azure, or GCP for managing secure, scalable infrastructure
Experience with Docker, Kubernetes, or Helm for secure containerized deployments
Proficiency in Snyk, SonarQube, Aqua Security, or Checkmarx for vulnerability scanning and code analysis
Familiarity with HashiCorp Vault, AWS Secrets Manager, or similar for secure key management
Expertise in Prometheus, Grafana, Splunk, or Datadog for observability and security monitoring
Strong skills in Python, Bash, or Go for automation and tool development
Knowledge of TCP/IP, load balancing, and firewalls for secure system connectivity
Proficiency with Git for managing code and infrastructure changes
Excellent verbal and written communication skills in English and Mandarin
Strong problem-solving skills and the ability to remain calm under pressure during critical incidents
Leadership and mentorship abilities to guide teams in adopting DevSecOps practices
Proactive mindset with a focus on driving automation, security, and operational efficiency
Willingness to participate in on-call rotations to support production incidents
Ability to work across time zones to coordinate with global and regional teams
Strong understanding of banking systems and compliance with local and global regulations

Nice to have:

Advanced degrees or certifications (e.g., AWS Certified DevOps Engineer, CISSP, CISM)
Knowledge of Ali Cloud

What we offer:

Continuous professional development
Flexible working
Opportunities to grow within an inclusive and diverse environment

Additional Information:

Job Posted:
August 05, 2025

Expiration:
September 02, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Senior DevOps Engineer