The DevOps Engineer for the Cleanroom (Ransomware Recovery) environment will be working within the Engineering & Enterprise Tech, Storage Services team, involved in supporting, designing, implementing, automating and testing IT infrastructure components and engineering applications.

Focus will be on the security aspects of the rapidly developing services for ransomware protection and recovery. You will deliver and maintain a largely autonomous environment which in the event of a successful ransomware attack on the bank will allow the speedy recovery of multiple affected systems into ring fenced environments where they can be analysed, cleansed of any malware and rapidly recovered in the production environments.

Your area of responsibility will be to protect and recover both application data and infrastructure configuration data. Cutting edge technology, security and extensive automation will be mainstream elements of your job. The environment you build is the last resort for Rabobank systems in the event of a ransomware attack.

The nature of the Cleanroom environment means you must be versatile and knowledgeable and have a curious mindset regarding multiple supporting technologies.

Key areas of responsibility:

• Deliver infrastructural improvements and new developments in the field of infrastructure security, recovery, and automation.
• Support and optimize security and recovery for our compute, converged, storage, backup and archive environments with 21,000 VMs and nearly 20 PB of data across Europe and the Americas. These systems host thousands of applications and millions of customers.
• Share knowledge and learn. You will be working in a multi-disciplinary and international team interacting with multiple services already available in our department.
• For this role additional focus is the responsibility to ensure the Cleanroom systems meet security standards. Furthermore you will be responsible for supporting the Cleanroom environment on a day to day basis, this includes incident, problem and change management.

You are an experienced versatile T-shaped engineer and will be working with a small squad of versatile experts, expanding an existing ransomware recovery solution that has the ability to act as an autonomous boot-strap environment to rebuild components of the bank. Solutions will be practical, supportable and performant and compliant.

• Proficiency in VMware Aria Automation is essential
• Understanding of ransomware resilience strategies, including recovery planning, immutable backups, and air gapping
• Knowledge of security hardening best practices
• Experience with Role based access control (RBAC) and privilege management
• Understanding of common malware techniques, and attacker behavior
• Experience with vulnerability management and risk assessment
• Understanding of cryptography, certificate handling, and secrets management
• Ability to implement, and manage network segmentation

Wensen

• Experience with Terraform is preferred
• Familiarity with Ansible is advantageous

Optie tot verlenging: Niets over bekend.

Hybride: Geen verdere informatie.

Fee: De administratieve partner rekent een aanvullende fee van € 2,50 boven op het tarief.

Overig algemeen:

Let op! Bij voldoende passende aanbiedingen kan de opdracht al eerder gesloten worden, dus reageer op tijd.

Aanbiedingen kunnen alleen gedaan worden via de portal administratieve partner, anders kunnen we deze helaas niet in behandeling nemen. Mocht je hulp hierbij nodig dan kun je contact opnemen met de afdeling support.

OPTIONEEL Voor deze aanvraag geldt een inwerkperiode van 2 dagen tegen nultarief. Bij een aanbieding dient hier akkoord op gegeven te worden.