Senior Engineer, Cloud

Company Description

RHB Singapore is a progressive and growing financial organization. We are committed to creating a fulfilling, dynamic and engaging work environment for our team of more than 15,000 employees across locations in ASEAN.

**Job Description**:
**Primary Objective**
- Ensure IT operations and performance of IT systems hosted on the cloud to ensure operational effectiveness and efficiency
- Ensure cloud infra and workload running on the cloud infra is operated in a manner that complies with Bank Policies and frameworks, standards, circulars, guidelines and MAS regulated act, notices, circulars, and guidelines applicable to technology (Compliance, Audit, Risk Adherence)
- Ensure IT assets of cloud infra and workloads hosted on the cloud infra are protected and secure
- Contribute in the annual budgeting related to cloud infra and then effective usage and spend within budget the Capital and Operational expenditures
- Be a key stakeholder and technology partner on the bank Digital journey
- Be a lead to ensure a strong and competent cloud engineer team
- Foster and champion bank PRIDE values within the technology department and imbue the department with a culture of teamwork, innovation, discipline, resiliency and dedication to how work is approached
- Manage test environments on Cloud to ensure business can do their enhancements and new projects testing
- Promote, mentor, champion and assist technology department on their journey

Perform system administration related duties including advise, analyze, plan, implement, maintain, support (and retire/refresh where required) all locally hosted (On premise, Cloud) infra components required to run Singapore operations:

- Maintain and ensure infra components running in production are in a healthy state
- Analyze and recommend new infra component acquisitions to meet evolving Singapore Operation’s needs
- Ensure IT is operated in a manner that complies with Bank Policies and frameworks, standards, circulars, guidelines and MAS regulated act, notices, circulars, and guidelines applicable to technology (Compliance, Audit, Risk Adherence). - Infra components
- Ensure IT assets are protected and secure
- Assist in annual budgeting
- Be a key stakeholder and technology partner on the bank Digital journey
- Foster and champion bank PRIDE values within the technology department and imbue the department with a culture of teamwork, innovation, discipline, resiliency and dedication to how work is approached
- Provide day-to-day support for infra components
- Middleware, DB: Middleware (IBM HQ, Oracle Weblogic, Redhat JBOSS, ICBA JHIT), DB (SQL Server, Oracle RDBMS, MySQL, PostgreSQL, AWS Dynamo DB, AWS RDS / Aurora, AWS Redshift, MongoDB)

**Key Responsibilities**
- Strategy, Planning, Mgmt. Reporting
- Provide expert advice and support to technology management in the area of Cloud and DevOps expertise
- Contribute in the formulation a comprehensive Branch IT strategy covering IT policies and procedures, security, architecture, business solutions and operational functional requirements
- Keep abreast of developments and innovations in the FI IT landscape with a focus on Cloud and DevOps
- Provide mentorship, support and guidance to colleagues, share information and facilitate problem solving
- Contribute in the yearly budgeting for IT expenditures and investments. Cloud Infra and Platforms (Cloud and non Cloud) Operations
- Oversee performance monitoring of systems to ensure outstanding operational effectiveness at low operating costs - Cloud infra and both Cloud and non-Cloud for DB, Middleware components
- Ensure prompt and efficient provision of IT support
- Oversee contingency plans and ensure their adequacy
- Ensure IT assets are protected and secure
- Ensure IT operations run in a manner consistent with high score from audit, risk, compliance assessments. The following to be operationalized as standard procedure against all IT asset components - Cloud infra and both Cloud and non-Cloud for DB, Middleware components.:

- Administrative Accounts - All admin accounts lodged into PAM solution per group IT Security guidelines and MAS notice 655 point 4.1
- Patching - Patch notification process established with vendors and patch calendar updated, upon patch release assessment and implementation as needed Per patching guidelines and MAS notice 655 point 4.2
- Hardening - Per component definition and enforcement against SG security standard and Group IT Security guidelines and SG addendum/s and MAS notice 655 point 4.3
- Network Perimeter Defense - Network traffic and segments, firewalls, proxies, dns, vpn access setup in secure manner per group IT security guidelines and MAS notice 655 4.4
- Malware - IT Security consulted and all required IT security protections installed on IT assets per MAS notice 655 point 4.5
- Multi-factor Authentication - MFA, where applicable implement MFA of administrative and internet accounts with access to customer information usin