Devops Lead

Company Profile MIZUHO BANK IS THE BANKING SUBSIDIARY OF MIZUHO FINANCIAL GROUP, WHICH IS HEADQUARTERED IN TOKYO, JAPAN. MIZUHO FINANCIAL GROUP, INC. IS THE 15TH LARGEST BANK IN THE WORLD, AS MEASURED BY TOTAL ASSETS OF APPROXIMATELY US$2 TRILLION. MIZUHO'S 55,000 EMPLOYEES WORLDWIDE OFFER COMPREHENSIVE FINANCIAL SERVICES TO CLIENTS IN OVER 800 OFFICES THROUGHOUT THE AMERICAS, EMEA, AND ASIA. MIZUHO BANK SINGAPORE BRANCH HAS AN ESTABLISHED LOCAL PRESENCE WITH OVER 50 YEARS OF HISTORY AND SERVES AS THE REGIONAL HUB FOR THE BANK'S APAC OPERATIONS. OPERATING WITH A FULL BANK LICENSE, MIZUHO BANK SINGAPORE BRANCH PROVIDES BANKING SERVICES TO OVER 2,000 JAPANESE AND NON-JAPANESE CORPORATE CLIENTS, WITH A STAFF STRENGTH OF ABOUT 1,000 EMPLOYEES. WE PROVIDE EXPERTISE IN CORPORATE FINANCE, TRADE FINANCE, CASH MANAGEMENT, FUNDS TRANSFERS, PROJECT FINANCE, AND TREASURY SERVICES TO HELP BUSINESSES DEVELOP AND FIND NEW OPPORTUNITIES. WE ALSO COLLABORATE WITH OUR AFFILIATE COMPANY, MIZUHO SECURITIES, TO PROVIDE INVESTMENT BANKING SOLUTIONS TO OUR CLIENTS. Job Responsibilities 1. Cloud Architecture Define reference architectures and landing zones for Azure and AWS. Govern hybrid cloud integration with datacenters (VPN, ExpressRoute, Direct Connect). Implement cloud governance policies for security, compliance, and cost optimization. Oversee identity, networking, and security frameworks across cloud platforms. 2. DevOps Automation & Engineering a. CI/CD & Infrastructure Automation Architect enterprise-wide CI/CD pipelines using Azure DevOps, GitLab CI, Jenkins, GitHub Actions. Build fully automated workflows for VM provisioning, middleware, storage, backup integrations, and patching. Integrate automated testing and compliance checks at every pipeline stage (unit, integration, security). b. Infrastructure-as-Code (IaC) Governance Define governance templates for IaC (Terraform, Ansible, Helm, ARM/Bicep). Enforce module versioning, parameter validation, tagging standards, and policy-as-code for infra resources. Implement drift detection and automated remediation for non-compliant resources. c. Branching & Version Control Strategy Standardize Git workflows (GitFlow, trunk-based, or hybrid) for both infra and application code. Define policies for branch naming, pull requests, peer reviews, and merge approvals. Enforce semantic versioning for infra modules, application releases, and CI/CD artifacts. d. Release Management & Governance Govern release processes with automated approval workflows, rollback strategies, and audit trails. Define release readiness gates (security scans, performance tests, compliance checks). Integrate with change management tools (ServiceNow, Jira) to ensure full traceability. e. Application Automation & Containerization Architect application delivery pipelines for containerized workloads (Kubernetes, OpenShift, Docker). Automate deployment of APIs, messaging middleware, and web apps (Tomcat, WebSphere, IIS, Nginx, Apache). Implement progressive delivery strategies (blue-green, canary, feature flags). f. Observability & Continuous Feedback Integrate monitoring, logging, and tracing into pipelines using Prometheus, Grafana, ELK, Splunk. Build automated feedback loops in CI/CD for proactive performance tuning and RCA Define SLOs/SLIs for pipelines to measure deployment success, rollback frequency, and MTTR. Job Requirements Skill Set Requirements Cloud : Azure, AWS, GCP landing zones, hybrid integration, governance. Automation: Terraform, Ansible, Helm, PowerCLI, Python, CI/CD pipelines. Version & Release Control: Git workflows, branching strategies, semantic versioning, automated approvals. Containers: Kubernetes, Docker, OpenShift, service mesh (Istio/Linkerd). Application Automation: API gateways, middleware (MQ, Solace), WebSphere, Tomcat, IIS, Apache, Nginx. Monitoring: Prometheus, Grafana, ELK, Splunk. Compliance & Security: CIS, ISO 27001, PCI-DSS, GDPR, MAS-TRM. Certifications (preferred): Azure/AWS/GCP Architect. Kubernetes (CKA/CKAD/CKS). Terraform Associate / Ansible automation. DevOps certifications (GitLab/Jenkins). ITIL/Release management (bonus).