Job Description

About The Role

CBRE Global Cyber Security Office – The Global CSO’s mission is to mitigate cyber security risk by actively working with the CBRE business, Digital & Technology and other partner organizations (Compliance, Risk Mgmt., Audit, & Legal) to seamlessly integrate security processes, tools, and people into the business culture providing a holistic security ecosystem, driving continuous improvements and seamless protection / monitoring capabilities globally.

We are working to build a progressive product team with a mindset toward being agile and solving problems iteratively. Being in a senior position at the start of this team, we would want you to help shape the direction of the team moving forward.

You do not have to have experience in all skills listed to be qualified for the position. If you have years’ worth of relevant similar experience, we still want to talk to you.

What You'll Do

Ensuring operational integrity of Global Cyber-Security Office DevSecOps application hosting and infrastructure; including:
Hosting Security Tools and Scanning Agents
Internal Security Pipeline
Third party vendor applications
AWS EKS Kubernetes cluster administration, and troubleshooting
Managing global multi-region cluster failover, and disaster recovery plans
Capable of triaging, debugging and root cause analysis of various commonly used Cloud Provider services such as IAM, Compute, Storage, DNS, Certificate & Secrets Management
Building and maintaining automation and governance around organization secrets management
Tracking, comparing and reporting SLOs, and SLIs against defined SLAs to ensure reliability and availability
Automating the collection of metrics from DevSecOps tools and implementing AppSec log ingestion at scale using tools such as Logstash, DataDog and Prometheus
On-call rotation for ensuring uptime, and functionality of critical internal customer services
Have well founded opinions and be willing to express your disagreement when something doesn't pass the ‘smell test’ for you.

What You'll Need

3-5 years of experience working with Kubernetes, and understanding of manifest management with Helm
3-5 years of experience working with AWS services such as IAM, KMS, EC2, EKS, S3, Route53, CloudFront, ACM, Secrets Manager
2-3 years of experience working with one or more other cloud providers aside from AWS such as GCP, Alibaba, Azure
3-5 years of experience writing, and running Terraform
3-5 years of experience using Linux systems administrator experience or equivalent skills
3-5 years or equivalent experience skills with DevOps or CICD pipelines (Jenkins, Github Actions, Concourse, etc…)
2-3 years of experience with configuration management tools such as Chef, Ansible, SaltStack.
Strong preference for Chef
2-3 years of experience with automating tasks using languages such as Bash, Python and Ruby and Go
3-5 years of experience using source control management and practices using Git, ADO, and Github
3-5 years of experience understanding and working on Infrastructure as Code (IaC)
Bachelor's degree (BE/BA/BS) in a related field of work or equivalent work experience