IPSec VPN Development

PortOne is re−imagining payments in Korea and other international markets. We are a Series B funded startup backed by prominent VC firms Softbank and Hanwa Capital

https://portone.io/global/en

PortOne provides a unified API for merchants to integrate with and manage all of the payment options available in Korea and SEA Markets - Thailand, Singapore, Indonesia etc. It's currently used by 2000+ companies and processing multi-billion dollars in annualized volume. We are building a team to take this product to international markets, and looking for engineers with a passion for fintech and digital payments.

Culture and Values at PortOne

• You will be joining a team that stands for Making a difference.
• You will be joining a culture that identifies more with Sports Teams rather than a 9 to 5 workplace.
• This will be remote role that allows you flexibility to save time on commute
• Your will have peers who are/have
• Highly Self Driven with A sense of purpose
• High Energy Levels - Building stuff is your sport
• Ownership - Solve customer problems end to end - Customer is your Boss
• Hunger to learn - Highly motivated to keep developing new tech skill sets

Who you are ?

* You are an athlete and Devops/DevSecOps is your sport.

* Your passion drives you to learn and build stuff and not because your manager tells you to.

* Your work ethic is that of an athlete preparing for your next marathon. Your sport drives you and you like being in the zone.

* You are NOT a clockwatcher renting out your time, and NOT have an attitude of "I will do only what is asked for"

* Enjoys solving problems and delight users both internally and externally

* Take pride in working on projects to successful completion involving a wide variety of technologies and systems

* Posses strong & effective communication skills and the ability to present complex ideas in a clear & concise way

* Responsible, self-directed, forward thinker, and operates with focus, discipline and minimal supervision

* A team player with a strong work ethic

Experience

* 2+ year of experience working as a Devops/DevSecOps Engineer

* BE in Computer Science or equivalent combination of technical education and work experience

* Must have actively managed infrastructure components & devops for high quality and high scale products

* Proficient knowledge and experience on infra concepts - Networking/Load Balancing/High Availability

* Experience on designing and configuring infra in cloud service providers - AWS / GCP / AZURE

* Knowledge on Secure Infrastructure practices and designs

* Experience with DevOps, DevSecOps, Release Engineering, and Automation

* Experience with Agile development incorporating TDD / CI / CD practices

Hands on Skills

* Proficient in atleast one high level Programming Language: Go / Java / C

* Proficient in scripting - bash scripting etc - to build/glue together devops/datapipeline workflows

* Proficient in Cloud Services - AWS / GCP / AZURE

* Hands on experience on CI/CD & relevant tools - Jenkins / Travis / Gitops / SonarQube / JUnit / Mock frameworks

* Hands on experience on Kubenetes ecosystem & container based deployments - Kubernetes / Docker / Helm Charts / Vault / Packer / lstio / Flyway

* Hands on experience on Infra as code frameworks - Terraform / Crossplane / Ansible

* Version Control & Code Quality: Git / Github / Bitbucket / SonarQube

* Experience on Monitoring Tools: Elasticsearch / Logstash / Kibana / Prometheus / Grafana / Datadog / Nagios

* Experience with RDBMS Databases & Caching services: Postgres / MySql / Redis / CDN

* Experience with Data Pipelines/Worflow tools: Airflow / Kafka / Flink / Pub-Sub

* DevSecOps - Cloud Security Assessment, Best Practices & Automation

* DevSecOps - Vulnerabiltiy Assessments/Penetration Testing for Web, Network and Mobile applications

* Preferrable to have Devops/Infra Experience for products in Payments/Fintech domain - Payment Gateways/Bank integrations etc

What will you do ?

Devops

* Provisioning the infrastructure using Crossplane/Terraform/Cloudformation scripts.

* Creating and Managing the AWS EC2, RDS, EKS, S3, VPC, KMS and IAM services, EKS clusters & RDS Databases.

* Monitor the infra to prevent outages/downtimes and honor our infra SLAs

* Deploy and manage new infra components.

* Update and Migrate the clusters and services.

* Reducing the cloud cost by enabling/scheduling for less utilized instances.

* Collaborate with stakeholders across the organization such as experts in - product, design, engineering

* Uphold best practices in Devops/DevSecOps and Infra management with attention to security best practices

DevSecOps

* Cloud Security Assessment & Automation

* Modify existing infra to adhere to security best practices

* Perform Threat Modelling of Web/Mobile applications

* Integrate security testing tools (SAST, DAST) in to CI/CD pipelines

* Incident management and remediation - Monitoring security incidents, recovery from and remediation of the issues

* Perform frequent Vulnerabiltiy Assessments/Penetration Testing for Web, Network and Mobile applications

* Ensure the environment is compliant to CIS, NIST, PCI etc.

Here are examples of apps/features you will be supporting as a Devops/DevSecOps Engineer

* Intuitive, easy-to-use APIs for payment process.

* Integrations with local payment gateways in international markets.

* Dashboard to manage gateways and transactions.

* Analytics platform to provide insights

-The role which we are hiring is of Individual Contributor.

-Framework and principles of React Native

-Architecture patterns

-Redux

-IOS & Android

-Redux Saga.

-TypeScript/JavaScript

-Class/Functional Components

-Hooks

-NFRs(Accessibility, Unit test cases)

-Component Lifecycle events

-Knowledge of Flat list, Flexbox, UI creation

-High Order Components

-Security and Performance aspects

-Native bridging

-Code Push

-App Distribution and deployment

-SSL Pinning

-Navigation concepts

-Networking

As part of the Cloud Platform / Devops team at Upswing, you will get to work on building state-of-the-art infrastructure for the future. You will also be –

• Building Infrastructure on AWS driven through terraform and building automation tools for deployment, infrastructure management, and observability stack 
• Building and Scaling on Kubernetes
• Ensuring the Security of Upswing Cloud Infra
• Building Security Checks and automation to improve overall security posture 
• Building automation stack for components like JVM-based applications, Apache Pulsar, MongoDB, PostgreSQL, Reporting Infra, etc.
• Mentoring people across the teams to enable best practices 
• Mentoring and guiding team members to upskill and helm them develop work class Fintech Infrastructure

What will you do if you join us?

• Write a lot of code
• Engage in a lot of cross-team collaboration to independently drive forward infrastructure initiatives and Devops practices across the org 
• Taking Ownership of existing, ongoing, and future initiatives 
• Plan Architecture- for upcoming infrastructure
• Build for Scale, Resiliency & Security 
• Introduce best practices wrt Devops & Cloud in the team
• Mentor new/junior team members and eventually build your own team

You should have

• Curiosity for on-the-job learning and experimenting with new technologies and ideas
• A strong background in Linux environment
• Must have Programming skills and Experience
• Strong experience in Cloud technologies, Security and Networking concepts, Multi-cloud environments, etc.
• Experience with at least one scripting language (GoLang/Python/Ruby/Groovy)
• Experience in Terraform is highly desirable but not mandatory
• Experience with Kubernetes and Docker is required 
• Understanding of the Java Technologies and Stack
• Any other Devops related experience will be considered

Policies, Systems, Processes & Procedures

•  Review and ensure the India information security policies are aligned with group policies and practices.
•  Review and provide recommendations to India policies, standards, guidelines/ processes concerning RBI (Reserve Bank of India) regulatory requirements
•  Coordinate with business units to define SLA for India
• Formulate the security strategy and roadmap for India

Information Security

•  Identify and ensure compliance to unique security requirements for RBI (Reserve Bank of India) related to RBI cyber security framework and RBI Guidelines on Information security.
•  Establish contacts with RBI (Reserve Bank of India) regulators to receive security updates, circulars
•  Coordinate for the group for various regulatory security audits at the Singapore location.
•  Monitor and track all India open issues with IT and concerned international SPOCS
•  Assist the GSO office and BU in attaining information security compliance objectives.
•  Identify issues that could impact the bank and escalate any serious issues/ breaches/ violations; develop/monitor action plans for its closure in liaison with local, and overseas branches, and business groups.
•  With the support of the Head office GSO team, perform risk assessments for locally implemented IT solutions and track open issues to closure
•  Instigate and maintain contact with RBI Regulatory Authorities, Regulatory compliance department, and ensure good & healthy working relationships.
•  Review new regulatory legislations; promptly communicate all regulatory notices/circulars to all concerned areas, provide interpretations if necessary; develop/monitor action plans towards its implementation.
•  Assist Head office during Regulatory Examinations; ensure implementation/regularization of observations linked to compliance while meeting the deadline(s).
• Respond to queries that are sought by local Regulatory Authorities / Law Enforcement Agencies Head Office & Overseas branches, in a timely manner with complete and accurate information.

Job Context

•  Security Compliance requirements at the India location.
•  Highlight security status & concerns to management.
•  Consult with IT and information security staff to ensure that an implementation plan is established.
•  Actively participate and contribute to GSO initiatives
•  Track open Audit issues on information security to closure
•  Risk assessments for local implementations
• Inform HO of any new 3rd party technology vendor for vendor assessment

• Knowledge of Handling goods documentation as per GST law
• Invoice, GST, Ewaybill, HSN code
• Have Average communication skills - English (Vocal and Written)
• Basic computer skills in windows office especially word and excel
• Responsible attitude towards work ethics
• A quick learner, flexible and adaptable
• Able to work in rotational shifts, i.eespecially night shifts, 

• Support for Incident and Request management tasks as assigned.
• Administration and understanding of the following network services to support Incident and Request tasks as assigned:
• Palo Alto Firewalls
• LAN Routing and Switching
• Microsoft Azure Networking – Vnets, Express Route, Vnet Peering, VPN Gateways
• LAN to LAN VPN Tunnels
• Arista Network devices
• Work with Networking Monitoring tools such as one or more of the following: Solar Winds, Splunk, Prime, NetMRI, Nagios
• Work directly with telecom carriers and Network infrastructure maintenance providers as needed, such as Verizon, Tata, Bharti, and Cisco.
• Maximize network performance by monitoring performance, troubleshooting network problems and outages, scheduling upgrades, and collaborating with network architects on network optimization
• Supports routing and switching and work on BGP, OSPF protocols
• Support China retail store infrastructure and data center through on-call rotations

QUALIFICATIONS:

• Graduate or above
• 6-7 years experience in LAN/WAN Routing including 2 or more years of LAN/WAN Administration experience within a multi-platform technical environment.
• In-depth understanding of voice and/or data technologies and subject matter expert in at least one area.
• Cisco Certified or equivalent combination of knowledge and experience.
• Understanding on IPsec, VPNs, GRE, NAT/PAT over varied platforms
• Expert knowledge of all LAN switching technologies eg Spanning Tree, VLAN management, and VTP concepts on Cisco, Nexus, and Arista
• Good understanding of MPLS routing and OSPF routing

Below are the skill set needed for the immediate Lanner board bring up requirements

• Good understanding of Linux kernel modules, with familiarity of kernel debugging, good shell scripting
• 4 to 6 years of experience 
• Knowledge in board bring up, bootloader ( U-boot/BIOS/GRUB2 etc..) and device drivers  
• Strong C  programming with knowledge of networking protocols ( L2/L3, TCP.UDP, HTTPS etc..)

This is the white-box variant would be using

https://www.lannerinc.com/products/network-appliances/x86-desktop-network-appliances/nca-1515">https://www.lannerinc.com/products/network-appliances/x86-desktop-network-appliances/nca-1515