Asset Management - Infrastructure Engineer, Cloud Platform

Job responsibilities

1. Responsible for the overall planning, construction, and operation management of the company's cloud platforms (private cloud, virtualization platform, and public cloud resources), ensuring the stable and highly available operation of business systems;

2. Designed the company's cloud network architecture, dedicated line and VPN connections, VPC and subnet division, DNS, outbound and NAT, cloud routing, as well as isolation of production and testing network environments to meet regulatory requirements;

3. Design cloud platform account and resource hierarchies, identity and access management, tags and naming standards, formulate and implement full lifecycle cloud resource management strategies, covering resource application, approval, delivery, monitoring, capacity planning, and recovery, promoting standardization and automation of resource delivery;

4. Build and maintain an automation foundation, enabling infrastructure as code, configuration management, and autonomous delivery, lead the construction and operation of container cloud platforms (Kubernetes, Docker), and promote cloud migration and cloud-native architecture transformation;

5. Capacity planning and management of cloud platforms, version management of each component, and patch updates ensure platform stability and security;

6. Responsible for cloud platform security and compliance, implementing regulatory requirements for Cybersecurity Classified Protection 3 .0, data security, and personal information protection, and cooperating with internal and external audits and regulatory inspections;

7. Continuously conduct cloud cost analysis and optimization, establish resource utilization efficiency evaluation mechanisms, and reasonably control IT operating costs;

8. Establish and improve systems, processes, and SOP documents related to cloud platform operation and maintenance, and manage third-party suppliers and cloud service providers related to the platform;

9. Maintain close collaboration with the Group's IT team to implement the Group's global cloud security standards, technical specifications, and management requirements within the company;

10. Track technological development trends in the cloud computing field, assess the application value of new technologies to company business, and provide professional advice for IT architecture evolution.

Required qualifications, capabilities, and skills

1. Bachelor's degree or above in computer science, software engineering, network engineering, or related fields;

2. Over 8 years of experience in cloud platform planning, construction, or operations and maintenance; candidates with background in fund companies, securities firms, banks, or other financial institutions are preferred;

3. Proficient in mainstream virtualization technologies such as VMware vSphere, familiar with OpenStack architecture or mainstream private cloud platforms, and familiar with at least one public cloud (Alibaba Cloud, AWS, or Azure) architecture and product architecture;

4. Familiar with container technologies such as Kubernetes and Docker, with experience in container platform production environment operations and maintenance, proficient in Linux operating system, and proficient in at least one scripting or development language in Python, Shell, or Go;

5. Familiar with basic IaaS principles, including computing virtualization, distributed storage, virtual networks, load balancing, imaging, snapshots, elastic scaling, and other basic cloud components; familiar with and able to build cloud platform monitoring systems;

6. Familiar with TCP/IP networking, storage, and backup disaster recovery technologies; knowledgeable about IaC (Terraform, Ansible); able to develop scripts and automate integration based on cloud platform APIs;

7. Capable of cloud platform capacity assessment, performance tuning, complex fault troubleshooting, as well as solution writing and cross-team project advancement;

8. Familiar with cloud security systems, understanding the Cybersecurity Law, Data Security Law, Personal Information Protection Law, and regulatory requirements of the securities and fund industry;

9. Fluent in English, able to work as a working language, able to communicate effectively with the Global team;

10. Excellent communication, coordination, documentation, and problem-solving abilities; meticulous and meticulous work experience, strong sense of responsibility, team spirit, and certain team leadership abilities.

Preferred qualifications, capabilities, and skills

1. Holds cloud computing certifications such as Alibaba Cloud ACP/ACE, AWS, Azure, etc.;

2. Experience in cloud platform maintenance and management for securities and fund companies;